General
- Target 2026-08-06_cb3387916de88093f11184a427f57db6_elex_glassworm_stop_swisyn
- Size 3.8MB
- Sample260807-ajm8hatfmc
- SHA256 d0af1f6aab3a2e1ad72041ccef6d3bf272e21bf7bec2a9f484115c7371f0631f
- MD5 cb3387916de88093f11184a427f57db6
- SHA1 3847c9f9f294ad3485030a4ac3e6906c73f06277
- SHA512 effe4ca3f67fddbed79363f872798b3f39292f31c1117bca448ee82d7b8721ff6883ac77433d8abcb0b1f81ccf996b15705c99c51287383dde8a40d2d683d152
- SSDEEP 49152:tviSrzg0rd9d6b0CwmafXe2aVd6bl0VKrM0TOA:IC0gCwmWe2aVdM0VwMDA
- TLSH T170065B407682C171E00251F898AAD7EF56357E218F24D6CFB6E13F2D1A73AD85AB32C5
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
10/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-08-06_cb3387916de88093f11184a427f57db6_elex_glassworm_stop_swisyn.exe
Resource
win10v2004-20260513-en
10 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-08-06_cb3387916de88093f11184a427f57db6_elex_glassworm_stop_swisyn.exe
Resource
win11ltsc2024-20260709-en
10 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-08-06_cb3387916de88093f11184a427f57db6_elex_glassworm_stop_swisyn
- Size 3.8MB
- SHA256 d0af1f6aab3a2e1ad72041ccef6d3bf272e21bf7bec2a9f484115c7371f0631f
- MD5 cb3387916de88093f11184a427f57db6
- SHA1 3847c9f9f294ad3485030a4ac3e6906c73f06277
- SHA512 effe4ca3f67fddbed79363f872798b3f39292f31c1117bca448ee82d7b8721ff6883ac77433d8abcb0b1f81ccf996b15705c99c51287383dde8a40d2d683d152
- SSDEEP 49152:tviSrzg0rd9d6b0CwmafXe2aVd6bl0VKrM0TOA:IC0gCwmWe2aVdM0VwMDA
- TLSH T170065B407682C171E00251F898AAD7EF56357E218F24D6CFB6E13F2D1A73AD85AB32C5
- MD5 SHA1 SHA512 SSDEEP TLSH
Score10/10-
Modifies visibility of hidden/system files in Explorer
-
Executes dropped EXE
-
Adds Run key to start application
-
Drops file in System32 directory