General
- Target 2026-08-13_8604acbb4b5c2cee079be3b24c3dcfec_chir_elex_glassworm_stop
- Size 648KB
- Sample260813-wq7flsvsdv
- SHA256 3ddf09d5a681b63ceec4afb5478a19018c98699f076de5658062b10392e45ac4
- MD5 8604acbb4b5c2cee079be3b24c3dcfec
- SHA1 f67f83bf563240ea782610e25606a91a72acb83a
- SHA512 2e2a1fd9e4d4b79963e3018092e7354a69cc0bf888426d61fc0a6d8795410d857225e8aa0083a11820b84ba5f7db71aac4139df95a1505ace005bae5224e9850
- SSDEEP 12288:ZH7Wcjdc/r2sxxiPGGAOOPSXDV8ClgVYhX5FSV89iE1:ZbCj2sObHtqQA89i
- TLSH T123E4AF12B7C740F6DD9239B4157BE32BDB357618532AC9C7EFE02D628E201419B3A366
- MD5 SHA1 SHA512 SSDEEP TLSH
Static task
static1
2 signatures
Behavioral task
behavioral1
Sample
2026-08-13_8604acbb4b5c2cee079be3b24c3dcfec_chir_elex_glassworm_stop.exe
Resource
win10v2004-20260513-en
11 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-08-13_8604acbb4b5c2cee079be3b24c3dcfec_chir_elex_glassworm_stop.exe
Resource
win11ltsc2024-20260709-en
11 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-08-13_8604acbb4b5c2cee079be3b24c3dcfec_chir_elex_glassworm_stop
- Size 648KB
- SHA256 3ddf09d5a681b63ceec4afb5478a19018c98699f076de5658062b10392e45ac4
- MD5 8604acbb4b5c2cee079be3b24c3dcfec
- SHA1 f67f83bf563240ea782610e25606a91a72acb83a
- SHA512 2e2a1fd9e4d4b79963e3018092e7354a69cc0bf888426d61fc0a6d8795410d857225e8aa0083a11820b84ba5f7db71aac4139df95a1505ace005bae5224e9850
- SSDEEP 12288:ZH7Wcjdc/r2sxxiPGGAOOPSXDV8ClgVYhX5FSV89iE1:ZbCj2sObHtqQA89i
- TLSH T123E4AF12B7C740F6DD9239B4157BE32BDB357618532AC9C7EFE02D628E201419B3A366
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Creates a file in the Startup directory
A file was written to a Windows startup folder. Files in these directories are executed automatically when a user logs on or an application initializes.
-
Executes dropped EXE
-
Enumerates connected drives
Attempts to read the root path of hard drives other than the default C: drive.
-
AutoIT Executable
AutoIT scripts compiled to PE executables.