General
- Target 2026-08-02_e6400add1dd3a97d9e1b7a35bed09a80_elex_glassworm_hijackloader_virlock
- Size 4.0MB
- Sample260802-3g67tahd33
- SHA256 5b50f301054300ceca30617ccabee5d85848c8038541121ad5fa80fafad44796
- MD5 e6400add1dd3a97d9e1b7a35bed09a80
- SHA1 90fc752e347076553fdfc8e5d7cbb00f5787e6f2
- SHA512 20a28195de0a33e8c4e00c2c4f9f3be27645061a9a2a33204dadf5ca448b5fbebb430bbb74a8f6f5b241d9478c2c8facd18e4d001f517ee64b89304bf0ca06af
- SSDEEP 49152:TI2+KtitL3IzTT3S9tsgX8zEC8ULgCSA/Bkj0:TDhe3I/TIOSA
- TLSH T1C916B40A26D4241FE17981FD95320567C77BF9FFB61EC62AAC0B30BEAC5460F690171A
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
10/10
Static task
static1
3 signatures
Behavioral task
behavioral1
Sample
2026-08-02_e6400add1dd3a97d9e1b7a35bed09a80_elex_glassworm_hijackloader_virlock.exe
Resource
win10v2004-20260513-en
4 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-08-02_e6400add1dd3a97d9e1b7a35bed09a80_elex_glassworm_hijackloader_virlock.exe
Resource
win11ltsc2024-20260709-en
4 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-08-02_e6400add1dd3a97d9e1b7a35bed09a80_elex_glassworm_hijackloader_virlock
- Size 4.0MB
- SHA256 5b50f301054300ceca30617ccabee5d85848c8038541121ad5fa80fafad44796
- MD5 e6400add1dd3a97d9e1b7a35bed09a80
- SHA1 90fc752e347076553fdfc8e5d7cbb00f5787e6f2
- SHA512 20a28195de0a33e8c4e00c2c4f9f3be27645061a9a2a33204dadf5ca448b5fbebb430bbb74a8f6f5b241d9478c2c8facd18e4d001f517ee64b89304bf0ca06af
- SSDEEP 49152:TI2+KtitL3IzTT3S9tsgX8zEC8ULgCSA/Bkj0:TDhe3I/TIOSA
- TLSH T1C916B40A26D4241FE17981FD95320567C77BF9FFB61EC62AAC0B30BEAC5460F690171A
- MD5 SHA1 SHA512 SSDEEP TLSH
Score9/10-
Detects executables containing URLs to raw contents of a Github gist
-
Detects executables embedding registry key / value combination indicative of disabling Windows Defen