General

  • Target
    2026-08-10_1086b9f305e7bcceeae0f0bf6a4a7491_glassworm_mespinoza_remcos
  • Size 5.8MB
  • Sample260810-mx4hvs11ex
  • SHA256 51763ae0e98a585546ae7dd972a8e5e171067e5f81036c69f99d9a0352618de3
  • MD5 SHA1 SHA512 SSDEEP TLSH
Score
10/10

Malware Config

Signatures

  • Detects executables packed with VMProtect. 1 IoCs
  • VMProtect packed file 1 IoCs

    Detects executables packed with VMProtect commercial packer.

File Explorer

  • 2026-08-10_1086b9f305e7bcceeae0f0bf6a4a7491_glassworm_mespinoza_remcos
    .exe 5.8MB

2026-08-10_1086b9f305e7bcceeae0f0bf6a4a7491_glassworm_mespinoza_remcos

  • IMPHASH bc39f2db27151e79696de84085533bb5
  • SHA256 51763ae0e98a585546ae7dd972a8e5e171067e5f81036c69f99d9a0352618de3
  • MD5 SHA1 SHA512 SSDEEP TLSH
  • Detects executables packed with VMProtect.

  • VMProtect packed file

    Detects executables packed with VMProtect commercial packer.

Digest
91:0a:1d:b9:8e:be:33:1c:7b:d9:60:fe:26:9e:a9:49:42:e6:39:0a:f6:62:8c:17:16:57:12:b0:49:7c:f0:eb
Digest Algorithm
sha256
PE Digests Matches
Trusted
Signing Certificate
SERIALNUMBER=91110000700049024C,CN=广联达科技股份有限公司,O=广联达科技股份有限公司,ST=Beijing,C=CN,2.5.4.15=#131450726976617465204f7267616e697a6174696f6e,1.3.6.1.4.1.311.60.2.1.1=#13104861696469616e204469737472696374,1.3.6.1.4.1.311.60.2.1.2=#13074265696a696e67,1.3.6.1.4.1.311.60.2.1.3=#1302434e
Digest
fc:4d:93:d1:5c:d4:0d:ce:b4:e1:5f:9e:b1:69:6c:e0:ee:ea:32:03
Digest Algorithm
sha1
PE Digests Matches
Trusted
Signing Certificate
SERIALNUMBER=91110000700049024C,CN=广联达科技股份有限公司,O=广联达科技股份有限公司,ST=Beijing,C=CN,2.5.4.15=#131450726976617465204f7267616e697a6174696f6e,1.3.6.1.4.1.311.60.2.1.1=#13104861696469616e204469737472696374,1.3.6.1.4.1.311.60.2.1.2=#13074265696a696e67,1.3.6.1.4.1.311.60.2.1.3=#1302434e
Minor OS version
0
Major OS version
6
Entry point
4270451
Magic Number
523
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_GUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LARGE_ADDRESS_AWARE
PDB paths