General
- Target 2026-08-15_2a37f296acc7c9268edb81a170fea098_elex_glassworm_hijackloader_virlock
- Size 4.0MB
- Sample260815-w24h4asvb1
- SHA256 5d586a70f2b3b41efa91013d1df3a85bd8f88e0fdd38220dbabab72adfb10db9
- MD5 2a37f296acc7c9268edb81a170fea098
- SHA1 bad280e2bd489c1d64d765a1adbe191050e179c0
- SHA512 842ae794c8c965d5cb96efe89942cb2f304a2c46356f5ed0840ddaca46ac40a510645185af356fbb01076554a68da30d282d94c9a80daaaa74eb738fee4966e3
- SSDEEP 49152:kI2+KtitL3Iz3iT3S9tsgX8zEC8ULgCSA/Bkj0:kDhe3IDiTIOSA
- TLSH T12316B40A26D4241FE17981FD95720567C77BF9FFB61EC62AAC0B30BEAC5420F690171A
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
10/10
Static task
static1
3 signatures
Behavioral task
behavioral1
Sample
2026-08-15_2a37f296acc7c9268edb81a170fea098_elex_glassworm_hijackloader_virlock.exe
Resource
win10v2004-20260513-en
4 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-08-15_2a37f296acc7c9268edb81a170fea098_elex_glassworm_hijackloader_virlock.exe
Resource
win11ltsc2024-20260709-en
4 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-08-15_2a37f296acc7c9268edb81a170fea098_elex_glassworm_hijackloader_virlock
- Size 4.0MB
- SHA256 5d586a70f2b3b41efa91013d1df3a85bd8f88e0fdd38220dbabab72adfb10db9
- MD5 2a37f296acc7c9268edb81a170fea098
- SHA1 bad280e2bd489c1d64d765a1adbe191050e179c0
- SHA512 842ae794c8c965d5cb96efe89942cb2f304a2c46356f5ed0840ddaca46ac40a510645185af356fbb01076554a68da30d282d94c9a80daaaa74eb738fee4966e3
- SSDEEP 49152:kI2+KtitL3Iz3iT3S9tsgX8zEC8ULgCSA/Bkj0:kDhe3IDiTIOSA
- TLSH T12316B40A26D4241FE17981FD95720567C77BF9FFB61EC62AAC0B30BEAC5420F690171A
- MD5 SHA1 SHA512 SSDEEP TLSH
Score9/10-
Detects executables containing URLs to raw contents of a Github gist
-
Detects executables embedding registry key / value combination indicative of disabling Windows Defen