General

  • Target
    2026-08-10_095e77c5d5553e11cf627de1e151d8d1_glassworm_mespinoza_remcos
  • Size 5.5MB
  • Sample260810-mzvnqsff39
  • SHA256 a16897acd688181a7c31ad694d28b39b0a8dbf5bffb8f644d3cb5daeb69baf77
  • MD5 SHA1 SHA512 SSDEEP TLSH
Score
10/10

Malware Config

Signatures

  • Detects executables packed with VMProtect. 1 IoCs
  • VMProtect packed file 1 IoCs

    Detects executables packed with VMProtect commercial packer.

File Explorer

  • 2026-08-10_095e77c5d5553e11cf627de1e151d8d1_glassworm_mespinoza_remcos
    .exe 5.5MB

2026-08-10_095e77c5d5553e11cf627de1e151d8d1_glassworm_mespinoza_remcos

  • IMPHASH 97ccab9ea8810d9409aee40c575a9178
  • SHA256 a16897acd688181a7c31ad694d28b39b0a8dbf5bffb8f644d3cb5daeb69baf77
  • MD5 SHA1 SHA512 SSDEEP TLSH
  • Detects executables packed with VMProtect.

  • VMProtect packed file

    Detects executables packed with VMProtect commercial packer.

Digest
0a:a4:dc:5a:ec:f6:66:17:19:47:8c:e9:59:60:fa:ce:78:84:0f:c3:a5:de:ca:37:8f:59:69:88:51:98:8e:b1
Digest Algorithm
sha256
PE Digests Matches
Trusted
Signing Certificate
SERIALNUMBER=91110000700049024C,CN=广联达科技股份有限公司,O=广联达科技股份有限公司,ST=Beijing,C=CN,2.5.4.15=#131450726976617465204f7267616e697a6174696f6e,1.3.6.1.4.1.311.60.2.1.1=#13104861696469616e204469737472696374,1.3.6.1.4.1.311.60.2.1.2=#13074265696a696e67,1.3.6.1.4.1.311.60.2.1.3=#1302434e
Digest
3d:db:fe:e7:e1:a8:58:84:60:a0:f4:cf:66:ad:ca:83:7b:52:aa:2d
Digest Algorithm
sha1
PE Digests Matches
Trusted
Signing Certificate
SERIALNUMBER=91110000700049024C,CN=广联达科技股份有限公司,O=广联达科技股份有限公司,ST=Beijing,C=CN,2.5.4.15=#131450726976617465204f7267616e697a6174696f6e,1.3.6.1.4.1.311.60.2.1.1=#13104861696469616e204469737472696374,1.3.6.1.4.1.311.60.2.1.2=#13074265696a696e67,1.3.6.1.4.1.311.60.2.1.3=#1302434e
Minor OS version
0
Major OS version
6
Entry point
4237669
Magic Number
523
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_GUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LARGE_ADDRESS_AWARE
PDB paths