General

  • Target
    2026-08-09_4ed5b048408b51886cfff0a6d22af808_conti_glassworm
  • Size 654KB
  • Sample260809-l85pmayyhz
  • SHA256 9f7a9b9eaf0bae63abdd12ebbfdc04b8f756544d291c86ba414a36483f970a77
  • MD5 SHA1 SHA512 SSDEEP TLSH
Score
10/10

Malware Config

Targets

    • Target
      2026-08-09_4ed5b048408b51886cfff0a6d22af808_conti_glassworm
    • Size 654KB
    • SHA256 9f7a9b9eaf0bae63abdd12ebbfdc04b8f756544d291c86ba414a36483f970a77
    • MD5 SHA1 SHA512 SSDEEP TLSH
    Score
    9/10
    • Detect binaries embedding considerable number of MFA browser extension IDs.

    • Detect binaries embedding considerable number of cryptocurrency wallet browser extension IDs.

    • Detects binaries (Windows and macOS) referencing many web browsers. Observed in information stealers

    • Detects executables containing SQL queries to confidential data stores. Observed in infostealers

    • Detects executables referencing many Password Manager software clients. Observed in infostealers

    • Detects executables referencing many confidential data stores found in browsers, mail clients, crypt

MITRE ATT&CK Matrix

Tasks