General
- Target 2026-08-21_3d06c2f7f40a4123d3658bfaffcda1b9_elex_glassworm_hijackloader_rhadamanthys_stop
- Size 3.5MB
- Sample260822-tvalbs1vb1
- SHA256 4422f7c08f255a8eefbb8c5fd48fc88fc234dfaf0bfcd6bdce49217e8a8f60ce
- MD5 3d06c2f7f40a4123d3658bfaffcda1b9
- SHA1 9226c68260998441fd0a73020147fc130560f0ca
- SHA512 594cbc0e6340000d7825335242fdc2d4a4a2593d72addebcecfc3289746d74d9885fd020379af35781336e4cadb8cb906dcbb03f77bc8e40c4017dc2b1e3c9ee
- SSDEEP 49152:Dx4fD2eW4SkZP4sz9WT3S9tsgX8zEC8ULgCSA/Bkj09:7fkZWTIOSAH
- TLSH T1ADF56B1673E84537F0BEA23FC071193D9375793B9B36C68F7500A99E49A6B828527323
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
10/10
Static task
static1
3 signatures
Behavioral task
behavioral1
Sample
2026-08-21_3d06c2f7f40a4123d3658bfaffcda1b9_elex_glassworm_hijackloader_rhadamanthys_stop.exe
Resource
win10v2004-20260513-en
6 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-08-21_3d06c2f7f40a4123d3658bfaffcda1b9_elex_glassworm_hijackloader_rhadamanthys_stop.exe
Resource
win11ltsc2024-20260709-en
6 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-08-21_3d06c2f7f40a4123d3658bfaffcda1b9_elex_glassworm_hijackloader_rhadamanthys_stop
- Size 3.5MB
- SHA256 4422f7c08f255a8eefbb8c5fd48fc88fc234dfaf0bfcd6bdce49217e8a8f60ce
- MD5 3d06c2f7f40a4123d3658bfaffcda1b9
- SHA1 9226c68260998441fd0a73020147fc130560f0ca
- SHA512 594cbc0e6340000d7825335242fdc2d4a4a2593d72addebcecfc3289746d74d9885fd020379af35781336e4cadb8cb906dcbb03f77bc8e40c4017dc2b1e3c9ee
- SSDEEP 49152:Dx4fD2eW4SkZP4sz9WT3S9tsgX8zEC8ULgCSA/Bkj09:7fkZWTIOSAH
- TLSH T1ADF56B1673E84537F0BEA23FC071193D9375793B9B36C68F7500A99E49A6B828527323
- MD5 SHA1 SHA512 SSDEEP TLSH
Score9/10-
Detects executables containing URLs to raw contents of a Github gist
-
Detects executables embedding registry key / value combination indicative of disabling Windows Defen
-
Drops file in System32 directory