General
- Target 2026-08-09_4ed5b048408b51886cfff0a6d22af808_conti_glassworm
- Size 654KB
- Sample260809-l85pmayyhz
- SHA256 9f7a9b9eaf0bae63abdd12ebbfdc04b8f756544d291c86ba414a36483f970a77
- MD5 4ed5b048408b51886cfff0a6d22af808
- SHA1 d28e467d540d72bd3f72a8a562975ff93b0b2dc8
- SHA512 13db7d38d7a8e43f02cdef1ce67cafd806d20a2436eaac00e5ce201862c0cf44147f96654557edcfc3681f8c4bd7cf48e6351e968ec62bb4f4c87feb85e00a3d
- SSDEEP 6144:qwuHRd4ANZSvM1r1Oj9O518L9PaMyFUTOYsOlzsNYC4x6oi:eZSvM1r1o9O5u9PjSYsONsm1i
- TLSH T1FAE4F856F3FA20DCE5B7C275AEB657B2BD75BC352234A92E515086351D20F808E38B23
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
10/10
Static task
static1
7 signatures
Behavioral task
behavioral1
Sample
2026-08-09_4ed5b048408b51886cfff0a6d22af808_conti_glassworm.exe
Resource
win10v2004-20260513-en
6 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-08-09_4ed5b048408b51886cfff0a6d22af808_conti_glassworm.exe
Resource
win11ltsc2024-20260709-en
6 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-08-09_4ed5b048408b51886cfff0a6d22af808_conti_glassworm
- Size 654KB
- SHA256 9f7a9b9eaf0bae63abdd12ebbfdc04b8f756544d291c86ba414a36483f970a77
- MD5 4ed5b048408b51886cfff0a6d22af808
- SHA1 d28e467d540d72bd3f72a8a562975ff93b0b2dc8
- SHA512 13db7d38d7a8e43f02cdef1ce67cafd806d20a2436eaac00e5ce201862c0cf44147f96654557edcfc3681f8c4bd7cf48e6351e968ec62bb4f4c87feb85e00a3d
- SSDEEP 6144:qwuHRd4ANZSvM1r1Oj9O518L9PaMyFUTOYsOlzsNYC4x6oi:eZSvM1r1o9O5u9PjSYsONsm1i
- TLSH T1FAE4F856F3FA20DCE5B7C275AEB657B2BD75BC352234A92E515086351D20F808E38B23
- MD5 SHA1 SHA512 SSDEEP TLSH
Score9/10-
Detect binaries embedding considerable number of MFA browser extension IDs.
-
Detect binaries embedding considerable number of cryptocurrency wallet browser extension IDs.
-
Detects binaries (Windows and macOS) referencing many web browsers. Observed in information stealers
-
Detects executables containing SQL queries to confidential data stores. Observed in infostealers
-
Detects executables referencing many Password Manager software clients. Observed in infostealers
-
Detects executables referencing many confidential data stores found in browsers, mail clients, crypt