General

  • Target
    2026-08-23_8c2e651a089610e2b284787fe49eb616_glassworm_helldown_nymaim_remcos
  • Size 10.3MB
  • Sample260824-gynadacc52
  • SHA256 ebf4d816f888236350390041a721b3ebd575628437c825c436fb976bf9e8778d
  • MD5 SHA1 SHA512 SSDEEP TLSH
Score
3/10

Malware Config

Signatures

  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

File Explorer

  • 2026-08-23_8c2e651a089610e2b284787fe49eb616_glassworm_helldown_nymaim_remcos
    .exe 10.3MB

2026-08-23_8c2e651a089610e2b284787fe49eb616_glassworm_helldown_nymaim_remcos

  • IMPHASH 61b08d11c42f03aff88dc547949e71b3
  • SHA256 ebf4d816f888236350390041a721b3ebd575628437c825c436fb976bf9e8778d
  • MD5 SHA1 SHA512 SSDEEP TLSH
  • Unsigned PE

    Checks for missing Authenticode signature.

Minor OS version
0
Major OS version
4
Entry point
102080
Magic Number
523
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_GUI
DLL Characteristics
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LINE_NUMS_STRIPPED IMAGE_FILE_LOCAL_SYMS_STRIPPED IMAGE_FILE_LARGE_ADDRESS_AWARE
PDB paths