General
- Target 2026-07-22_17b4bda9f4dcec2f5e698776e7e4b9e1_glassworm_hiddentear_remcos_xworm
- Size 166KB
- Sample260723-ann1laec73
- SHA256 a9ff4fbde5bb27981136ca2902000af76636fa327fdfcae50f3de411cbb9f5e1
- MD5 17b4bda9f4dcec2f5e698776e7e4b9e1
- SHA1 46d50c56d58b714f4bbc65b8aa43ddf9636c2262
- SHA512 ea67f9ac12602a93f1dcda16c68012aa16471399364adb2aa51fba754b52bb5af17bc7b1932d4438f08938f80d640442fa71d912f2abfabf2884ab3c7e254a03
- SSDEEP 3072:yELIb0+wW1a++9bx7UM+lmsolAIrRuw+mqv9j1MWLQ5:yEL0hwW1u9bt+lDAA
- TLSH T188F30EE06746C435D4AF99B9C4BBA6A7A833A21F9C18450D2CD2FF4B7D323464417CAB
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
7/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-07-22_17b4bda9f4dcec2f5e698776e7e4b9e1_glassworm_hiddentear_remcos_xworm.exe
Resource
win10v2004-20260513-en
7 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-07-22_17b4bda9f4dcec2f5e698776e7e4b9e1_glassworm_hiddentear_remcos_xworm.exe
Resource
win11ltsc2024-20260709-en
7 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-07-22_17b4bda9f4dcec2f5e698776e7e4b9e1_glassworm_hiddentear_remcos_xworm
- Size 166KB
- SHA256 a9ff4fbde5bb27981136ca2902000af76636fa327fdfcae50f3de411cbb9f5e1
- MD5 17b4bda9f4dcec2f5e698776e7e4b9e1
- SHA1 46d50c56d58b714f4bbc65b8aa43ddf9636c2262
- SHA512 ea67f9ac12602a93f1dcda16c68012aa16471399364adb2aa51fba754b52bb5af17bc7b1932d4438f08938f80d640442fa71d912f2abfabf2884ab3c7e254a03
- SSDEEP 3072:yELIb0+wW1a++9bx7UM+lmsolAIrRuw+mqv9j1MWLQ5:yEL0hwW1u9bt+lDAA
- TLSH T188F30EE06746C435D4AF99B9C4BBA6A7A833A21F9C18450D2CD2FF4B7D323464417CAB
- MD5 SHA1 SHA512 SSDEEP TLSH
Score7/10-
Drops startup file
-
Executes dropped EXE
-
Adds Run key to start application
MITRE ATT&CK Enterprise v16
Persistence
Boot or Logon Autostart Execution
1Registry Run Keys / Startup Folder
1Scheduled Task/Job
1Scheduled Task
1