General
- Target 2026-08-21_a07575238294ee3e304e73fcb81d642a_elex_glassworm_maze_poet-rat
- Size 13.6MB
- Sample260822-k5n22axtbx
- SHA256 a1ffc4fbcad941b0e78f56434f74fb1df37b8b0bd50833b50aade48410cc85ae
- MD5 a07575238294ee3e304e73fcb81d642a
- SHA1 c254df2689d5e57d1f8a124ae2d539241f09acf2
- SHA512 7119fa7203514313761a6e0670739f5a79e98cc6ad9e9aed9a37a4a8b57807f2ea94e13caea6e0b55697654f5a235e5e1bda6bcc4aa28eec0a566a7dfad82b39
- SSDEEP 196608:NSX+eN3rVqtO83mpHhzVr2KpqG1kvqVBdumKJf78:NSX+G3mO83mpHhzZ7q6kvqvEBf78
- TLSH T10FE69E42F7825DF1D9C240B065BFB73B8A369928477482E397A51DC9E8392D1363B3C9
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
7/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-08-21_a07575238294ee3e304e73fcb81d642a_elex_glassworm_maze_poet-rat.exe
Resource
win10v2004-20260513-en
15 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-08-21_a07575238294ee3e304e73fcb81d642a_elex_glassworm_maze_poet-rat
- Size 13.6MB
- SHA256 a1ffc4fbcad941b0e78f56434f74fb1df37b8b0bd50833b50aade48410cc85ae
- MD5 a07575238294ee3e304e73fcb81d642a
- SHA1 c254df2689d5e57d1f8a124ae2d539241f09acf2
- SHA512 7119fa7203514313761a6e0670739f5a79e98cc6ad9e9aed9a37a4a8b57807f2ea94e13caea6e0b55697654f5a235e5e1bda6bcc4aa28eec0a566a7dfad82b39
- SSDEEP 196608:NSX+eN3rVqtO83mpHhzVr2KpqG1kvqVBdumKJf78:NSX+G3mO83mpHhzZ7q6kvqvEBf78
- TLSH T10FE69E42F7825DF1D9C240B065BFB73B8A369928477482E397A51DC9E8392D1363B3C9
- MD5 SHA1 SHA512 SSDEEP TLSH
Score7/10-
Executes dropped EXE
-
Enumerates connected drives
Attempts to read the root path of hard drives other than the default C: drive.
-
Drops file in System32 directory
MITRE ATT&CK Enterprise v16
Credential Access
Credentials from Password Stores
1Credentials from Web Browsers
1Unsecured Credentials
1Credentials In Files
1