2026-08-30_5f724a1d36c248466e7f9dc9a1fd9e40_conti_glassworm

Sharing

Copy URL Twitter E-mail

General

Target
2026-08-30_5f724a1d36c248466e7f9dc9a1fd9e40_conti_glassworm
Size 192KB
Sample260831-msj9eshj9t
SHA256 c3374c18f38a72c06b936ebaa12cfdd93334dc68b97dc334c41a7180e1c0ac1e
MD5 5f724a1d36c248466e7f9dc9a1fd9e40
SHA1 b90842131535260c4666073c04000ad9ba819a63
SHA512 fe06e8d871cad445b335f3b79057116823855880d7c0481dbff5b0d799ec0a07088c2a1280d29a0245cf512a2f9ac9708f23adcc618ce109e5b8be5bbb9389a5
SSDEEP 3072:DDi1kqOx/5Wcr+qwVde2xZhBAmbRnfRXb0IVggDSLbK9+Yd3q3jTic86j4xXQ8c:DLF03hAmbRJoPLg9xMvic86El
TLSH
T1B714C01AEFD365DDE05EC0B8A4DA66B3E361B81A01E0EEEF2744D5375E70D549F08824
MD5 SHA1 SHA512 SSDEEP TLSH

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
2026-08-30_5f724a1d36c248466e7f9dc9a1fd9e40_conti_glassworm

File Explorer

2026-08-30_5f724a1d36c248466e7f9dc9a1fd9e40_conti_glassworm

.exe 192KB

2026-08-30_5f724a1d36c248466e7f9dc9a1fd9e40_conti_glassworm

IMPHASH 913fe8d097b76191b78629b4b33b5ed3
SHA256 c3374c18f38a72c06b936ebaa12cfdd93334dc68b97dc334c41a7180e1c0ac1e
MD5 5f724a1d36c248466e7f9dc9a1fd9e40
SHA1 b90842131535260c4666073c04000ad9ba819a63
SHA512 fe06e8d871cad445b335f3b79057116823855880d7c0481dbff5b0d799ec0a07088c2a1280d29a0245cf512a2f9ac9708f23adcc618ce109e5b8be5bbb9389a5
SSDEEP 3072:DDi1kqOx/5Wcr+qwVde2xZhBAmbRnfRXb0IVggDSLbK9+Yd3q3jTic86j4xXQ8c:DLF03hAmbRJoPLg9xMvic86El
TLSH
T1B714C01AEFD365DDE05EC0B8A4DA66B3E361B81A01E0EEEF2744D5375E70D549F08824
MD5 SHA1 SHA512 SSDEEP TLSH

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

Major OS version

Entry point

86548

Magic Number

523

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_CUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_NX_COMPAT

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LINE_NUMS_STRIPPED IMAGE_FILE_LARGE_ADDRESS_AWARE IMAGE_FILE_DEBUG_STRIPPED

PDB paths

libhogweed-6

nettle_asn1_der_decode_bitstring_last nettle_asn1_der_decode_constructed nettle_asn1_der_decode_constructed_last nettle_asn1_der_iterator_first nettle_asn1_der_iterator_next nettle_dsa_keypair_to_sexp nettle_dsa_params_clear nettle_dsa_params_from_der_iterator nettle_dsa_params_init nettle_dsa_public_key_from_der_iterator nettle_openssl_provate_key_from_der nettle_rsa_keypair_from_der nettle_rsa_keypair_to_sexp nettle_rsa_private_key_clear nettle_rsa_private_key_init nettle_rsa_public_key_clear nettle_rsa_public_key_from_der_iterator nettle_rsa_public_key_init

libnettle-8

nettle_base64_decode_final nettle_base64_decode_init nettle_base64_decode_update nettle_buffer_clear nettle_buffer_grow nettle_buffer_init_realloc nettle_buffer_reset nettle_xrealloc

libgmp-10

__gmpz_clear __gmpz_init

kernel32

DeleteCriticalSection EnterCriticalSection GetCurrentProcess GetLastError GetModuleHandleA GetProcAddress InitializeCriticalSection IsDBCSLeadByteEx IsProcessorFeaturePresent LeaveCriticalSection LoadLibraryW MultiByteToWideChar SetUnhandledExceptionFilter Sleep TerminateProcess TlsGetValue VirtualProtect VirtualQuery WideCharToMultiByte

msvcrt

__C_specific_handler ___lc_codepage_func ___mb_cur_max_func __getmainargs __initenv __iob_func __set_app_type __setusermatherr _amsg_exit _cexit _commode _errno _fmode _initterm _lock _unlock _write atexit abort calloc exit fclose ferror fopen fprintf fputc free fwrite getc getenv localeconv malloc memcmp memcpy puts signal strchr strerror strlen strncmp vfprintf wcslen

Name

.text

Size

38KB

Virtual Size

38KB

Characteristics

IMAGE_SCN_CNT_CODE IMAGE_SCN_MEM_EXECUTE IMAGE_SCN_MEM_READ

Name

.data

Size

512B

Virtual Size

288B

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.rdata

Size

6KB

Virtual Size

6KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.pdata

Size

1KB

Virtual Size

1KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.xdata

Size

1KB

Virtual Size

1KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.bss

Size

Virtual Size

3KB

Characteristics

IMAGE_SCN_CNT_UNINITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.idata

Size

4KB

Virtual Size

3KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.tls

Size

512B

Virtual Size

16B

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.rsrc

Size

1KB

Virtual Size

1KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.reloc

Size

136KB

Virtual Size

328KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_EXECUTE IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Sharing

General

Malware Config

Signatures

File Explorer

2026-08-30_5f724a1d36c248466e7f9dc9a1fd9e40_conti_glassworm

libhogweed-6

libnettle-8

libgmp-10

kernel32

msvcrt

generic