2026-08-10_191072ea8b0dd73048ab656f7ed82dba_conti_elex_glassworm

Sharing

Copy URL Twitter E-mail

General

Target
2026-08-10_191072ea8b0dd73048ab656f7ed82dba_conti_elex_glassworm
Size 906KB
Sample260810-hhztxaxyft
SHA256 a660a6dcbc087a441093674e5108f00ff79603a8308cfa52010f99326364e1f7
MD5 191072ea8b0dd73048ab656f7ed82dba
SHA1 41f36d2ad37e1d1a23929bf18daf2e8da4c52537
SHA512 07b5dccd0e06ca4ac8f81b9a0f65f125bc9054e217dbf9d3c2133f57f9d89f87cbd97dfacf864ae3e774fb6d358a90dc1838835806c796b847d4f84d0a8610fc
SSDEEP 24576:jVJNb7uD0nvK7m2F/3bW4wtpiuNf/ZkFw:zsYnji/IdA
TLSH
T1C2158C4AFB8700B6C60709B18DEF93FF9320A7615159DA6BEA4ED744F4236C1EE56302
MD5 SHA1 SHA512 SSDEEP TLSH

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
2026-08-10_191072ea8b0dd73048ab656f7ed82dba_conti_elex_glassworm

File Explorer

2026-08-10_191072ea8b0dd73048ab656f7ed82dba_conti_elex_glassworm

.exe 906KB

2026-08-10_191072ea8b0dd73048ab656f7ed82dba_conti_elex_glassworm

IMPHASH a02adb77dde07872f263413646ef0240
SHA256 a660a6dcbc087a441093674e5108f00ff79603a8308cfa52010f99326364e1f7
MD5 191072ea8b0dd73048ab656f7ed82dba
SHA1 41f36d2ad37e1d1a23929bf18daf2e8da4c52537
SHA512 07b5dccd0e06ca4ac8f81b9a0f65f125bc9054e217dbf9d3c2133f57f9d89f87cbd97dfacf864ae3e774fb6d358a90dc1838835806c796b847d4f84d0a8610fc
SSDEEP 24576:jVJNb7uD0nvK7m2F/3bW4wtpiuNf/ZkFw:zsYnji/IdA
TLSH
T1C2158C4AFB8700B6C60709B18DEF93FF9320A7615159DA6BEA4ED744F4236C1EE56302
MD5 SHA1 SHA512 SSDEEP TLSH

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

Major OS version

Entry point

5280

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LINE_NUMS_STRIPPED IMAGE_FILE_32BIT_MACHINE

PDB paths

advapi32

CryptAcquireContextW CryptCreateHash CryptDestroyHash CryptGetHashParam CryptHashData CryptReleaseContext

crypt32

CryptStringToBinaryA

kernel32

CloseHandle CreateDirectoryW CreateEventA CreateFileW CreateMutexW CreateProcessW CreateSemaphoreA DeleteCriticalSection DeleteFileW DuplicateHandle EnterCriticalSection FindClose FindFirstFileW FindNextFileW FlushFileBuffers FormatMessageA FreeLibrary GetCPInfo GetCommandLineW GetCurrentProcess GetCurrentProcessId GetCurrentThread GetCurrentThreadId GetFileAttributesW GetFileSizeEx GetFullPathNameW GetLastError GetLocalTime GetModuleHandleA GetProcAddress GetProcessAffinityMask GetStartupInfoW GetSystemTimeAsFileTime GetThreadContext GetThreadPriority GetTickCount InitializeCriticalSection IsProcessorFeaturePresent LeaveCriticalSection LoadLibraryA LoadLibraryW LocalFree MoveFileExW MultiByteToWideChar OpenProcess OutputDebugStringA QueryPerformanceCounter QueryPerformanceFrequency RaiseException ReadFile ReleaseMutex ReleaseSemaphore RemoveDirectoryW ResetEvent ResumeThread SetEvent SetLastError SetProcessAffinityMask SetThreadContext SetThreadPriority SetUnhandledExceptionFilter Sleep SuspendThread TerminateProcess TlsAlloc TlsGetValue TlsSetValue TryEnterCriticalSection VirtualProtect VirtualQuery WaitForMultipleObjects WaitForSingleObject WideCharToMultiByte WriteFile

msvcrt

_XcptFilter __fpecode __lc_codepage __p__iob __p___mb_cur_max __p___winitenv __p__commode __p__fmode __p__wcmdln __pxcptinfoptrs __set_app_type __setusermatherr __wgetmainargs _assert _amsg_exit _beginthreadex _cexit _endthreadex _errno _exit _fileno _initterm _lock _read _setjmp3 _setmode _snprintf _strdup _unlock _vsnprintf _wcsicmp _wcsnicmp _wfopen _write abort atexit calloc exit fclose fflush fgets fputc fputs fputwc free fprintf fwprintf fwrite getc getenv isdigit islower isspace isupper isxdigit localeconv longjmp malloc memchr memcmp memcpy memmove memset realloc setvbuf signal strchr strcmp strerror strlen strncmp strtol strtoul tolower towlower ungetc vfprintf wcscmp wcslen wcstoul

shell32

CommandLineToArgvW

wininet

HttpQueryInfoW InternetCloseHandle InternetCrackUrlW InternetOpenUrlW InternetOpenW InternetReadFile InternetSetOptionW

Name

.text

Size

392KB

Virtual Size

391KB

Characteristics

IMAGE_SCN_CNT_CODE IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_EXECUTE IMAGE_SCN_MEM_READ

Name

.data

Size

1024B

Virtual Size

756B

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.rdata

Size

35KB

Virtual Size

35KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

Size

81KB

Virtual Size

81KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.bss

Size

Virtual Size

2KB

Characteristics

IMAGE_SCN_CNT_UNINITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.idata

Size

5KB

Virtual Size

4KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.tls

Size

512B

Virtual Size

16B

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.rsrc

Size

1KB

Virtual Size

1KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.reloc

Size

11KB

Virtual Size

10KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_DISCARDABLE IMAGE_SCN_MEM_READ

Name

/14

Size

2KB

Virtual Size

2KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_DISCARDABLE IMAGE_SCN_MEM_READ

Name

/29

Size

151KB

Virtual Size

151KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_DISCARDABLE IMAGE_SCN_MEM_READ

Name

/41

Size

29KB

Virtual Size

28KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_DISCARDABLE IMAGE_SCN_MEM_READ

Name

/55

Size

83KB

Virtual Size

83KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_DISCARDABLE IMAGE_SCN_MEM_READ

Name

/67

Size

1KB

Virtual Size

1KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_DISCARDABLE IMAGE_SCN_MEM_READ

Name

/78

Size

19KB

Virtual Size

18KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_DISCARDABLE IMAGE_SCN_MEM_READ

Name

/94

Size

86KB

Virtual Size

85KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_DISCARDABLE IMAGE_SCN_MEM_READ

Name

/110

Size

4KB

Virtual Size

3KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_DISCARDABLE IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

File Explorer

2026-08-10_191072ea8b0dd73048ab656f7ed82dba_conti_elex_glassworm

advapi32

crypt32

kernel32

msvcrt

shell32

wininet

generic