edfe32d9d472602da95ee5ca8facab28c2afc4ab8e50b593d8cb9f7fbc32575d | Triage™

Login
Reports

Overview

overview

8

Static

static

3

2026-08-10...rm.exe

windows10-2004-x64

8

2026-08-10...rm.exe

windows11-ltsc_2024-x64

8

Sharing

Copy URL Twitter E-mail

General

Target
2026-08-10_b0a357ba93544f71f7871514f627a7c5_akira_elex_glassworm
Size 4.1MB
Sample260810-ch46qshk8s
SHA256 edfe32d9d472602da95ee5ca8facab28c2afc4ab8e50b593d8cb9f7fbc32575d
MD5 b0a357ba93544f71f7871514f627a7c5
SHA1 0da1bd3446ce25d587f52d2c3189890179ac136c
SHA512 e06aa2d7fcaccb0091f60f1b7a7e95c4c8b07bee04372fd41952d721c0e8c30dcd2b9f79aa21ef28aa72d656c9a0afa5d364238ddc1ae2cefbe767af576a57d3
SSDEEP 49152:oZJf/jXhCo1g2myQV1BqfVmA3PZBS9LRPpamXf5YDiT7KibvYCJLc6w:UKEZ3hBSLoiD
TLSH
T1F0169E82F99343FADA4B0875307EB33FDB325509453CCAE7EBA40D02EA76761594A14E
MD5 SHA1 SHA512 SSDEEP TLSH

Score

8^/10

defense_evasion discovery persistence privilege_escalation trojan

Static task

static1

1 signatures

Behavioral task

behavioral1

Sample

2026-08-10_b0a357ba93544f71f7871514f627a7c5_akira_elex_glassworm.exe

Resource

win10v2004-20260513-en

windows10-2004-x64

14 signatures

150 seconds

defense_evasion discovery persistence privilege_escalation trojan

Behavioral task

behavioral2

Sample

2026-08-10_b0a357ba93544f71f7871514f627a7c5_akira_elex_glassworm.exe

Resource

win11ltsc2024-20260709-en

windows11-ltsc_2024-x64

13 signatures

150 seconds

defense_evasion discovery persistence privilege_escalation trojan

Malware Config

Targets

- Target
  2026-08-10_b0a357ba93544f71f7871514f627a7c5_akira_elex_glassworm
- Size 4.1MB
- SHA256 edfe32d9d472602da95ee5ca8facab28c2afc4ab8e50b593d8cb9f7fbc32575d
- MD5 b0a357ba93544f71f7871514f627a7c5
- SHA1 0da1bd3446ce25d587f52d2c3189890179ac136c
- SHA512 e06aa2d7fcaccb0091f60f1b7a7e95c4c8b07bee04372fd41952d721c0e8c30dcd2b9f79aa21ef28aa72d656c9a0afa5d364238ddc1ae2cefbe767af576a57d3
- SSDEEP 49152:oZJf/jXhCo1g2myQV1BqfVmA3PZBS9LRPpamXf5YDiT7KibvYCJLc6w:UKEZ3hBSLoiD
- TLSH
  T1F0169E82F99343FADA4B0875307EB33FDB325509453CCAE7EBA40D02EA76761594A14E
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

8^/10

defense_evasion discovery persistence privilege_escalation trojan
- Modifies Windows Firewall
  defense_evasion
- Checks whether UAC is enabled
  defense_evasion trojan
- Looks up external IP address via web service
  Uses a legitimate IP lookup service to find the infected system's external IP.
  discovery
- Network Share Discovery
  Attempt to gather information on host network.
  discovery
behavioral1 behavioral2

MITRE ATT&CK Enterprise v16

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Create or Modify System Process

Windows Service

Event Triggered Execution

Netsh Helper DLL

Privilege Escalation

Create or Modify System Process

Windows Service

Event Triggered Execution

Netsh Helper DLL

Defense Evasion

Impair Defenses

Disable or Modify System Firewall

Modify Registry

Credential Access

Discovery

Network Share Discovery

Query Registry

System Information Discovery

System Location Discovery

System Language Discovery

System Network Configuration Discovery

Internet Connection Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

defense_evasiondiscoverypersistenceprivilege_escalationtrojan

behavioral2

defense_evasiondiscoverypersistenceprivilege_escalationtrojan

© 2018-2026

Terms | Privacy