General
- Target 2026-08-04_6cc19cdadfbb80b3a79565888f1d33eb_conti_glassworm
- Size 523KB
- Sample260804-hppmhstcpg
- SHA256 efb607709b043652b9715c42b15fff6a4802bcdcc63ff723e0ec4933a995fbf6
- MD5 6cc19cdadfbb80b3a79565888f1d33eb
- SHA1 e6d3ffeb9db18977d3b3bfbc36d6deee3c8ce92e
- SHA512 87772d34b02a16ab6906d4381920dd6a284520cbf7a61a4cc99789e96e47c134a9913440e75cd924a74e789bc4601307ff268c2bd7462a925949a72932f61509
- SSDEEP 6144:cTP11GsDQAZdHAJ2bL3ToqBpCqpfKU6wmPb2PbkHrQpFeDWE:YP1MSQAZpG2LoqjCqt76JgkHUFeDWE
- TLSH T1EDB43B51FBD62CDDE66382388D974376273CFDA05622E71B252472243E13AE0EF99706
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
10/10
Static task
static1
4 signatures
Behavioral task
behavioral1
Sample
2026-08-04_6cc19cdadfbb80b3a79565888f1d33eb_conti_glassworm.exe
Resource
win10v2004-20260513-en
3 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-08-04_6cc19cdadfbb80b3a79565888f1d33eb_conti_glassworm.exe
Resource
win11ltsc2024-20260709-en
3 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-08-04_6cc19cdadfbb80b3a79565888f1d33eb_conti_glassworm
- Size 523KB
- SHA256 efb607709b043652b9715c42b15fff6a4802bcdcc63ff723e0ec4933a995fbf6
- MD5 6cc19cdadfbb80b3a79565888f1d33eb
- SHA1 e6d3ffeb9db18977d3b3bfbc36d6deee3c8ce92e
- SHA512 87772d34b02a16ab6906d4381920dd6a284520cbf7a61a4cc99789e96e47c134a9913440e75cd924a74e789bc4601307ff268c2bd7462a925949a72932f61509
- SSDEEP 6144:cTP11GsDQAZdHAJ2bL3ToqBpCqpfKU6wmPb2PbkHrQpFeDWE:YP1MSQAZpG2LoqjCqt76JgkHUFeDWE
- TLSH T1EDB43B51FBD62CDDE66382388D974376273CFDA05622E71B252472243E13AE0EF99706
- MD5 SHA1 SHA512 SSDEEP TLSH
Score9/10-
Detect binaries embedding considerable number of cryptocurrency wallet browser extension IDs.
-
Detects binaries (Windows and macOS) referencing many web browsers. Observed in information stealers
-
Detects executables containing URLs to raw contents of a Github gist