General
- Target 2026-09-04_8b0ac04bef058a30803e8795fe78ce63_glassworm
- Size 4.1MB
- Sample260905-eszecabg78
- SHA256 54b14a1b43f4feb77fd5edeea208b8f3d1450724c8f7c911b2e0e16bf90a829b
- MD5 8b0ac04bef058a30803e8795fe78ce63
- SHA1 8c706674574426ea1a3bfb2078a060156e0c365a
- SHA512 ea2255c4d55574ace80f49e2ccd76736c67a6eb162fe0dedc0760e94d981211d99edf7865f4d2b0f600592618577960745811c5222d4b03013c034eb0f27d822
- SSDEEP 98304:XtwgU4OxOwSjJw2z2C1BAUZLGNYQkktANxYhhBTfvQW49YAG/:XFXV2aW3
- TLSH T1E1169D43F2D268EDD667C134865B9733B735FC601612AF6B2624F6342E72EE02E48B51
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
10/10
Static task
static1
2 signatures
Behavioral task
behavioral1
Sample
2026-09-04_8b0ac04bef058a30803e8795fe78ce63_glassworm.exe
Resource
win10v2004-20260513-en
2 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-09-04_8b0ac04bef058a30803e8795fe78ce63_glassworm.exe
Resource
win11ltsc2024-20260709-en
2 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-09-04_8b0ac04bef058a30803e8795fe78ce63_glassworm
- Size 4.1MB
- SHA256 54b14a1b43f4feb77fd5edeea208b8f3d1450724c8f7c911b2e0e16bf90a829b
- MD5 8b0ac04bef058a30803e8795fe78ce63
- SHA1 8c706674574426ea1a3bfb2078a060156e0c365a
- SHA512 ea2255c4d55574ace80f49e2ccd76736c67a6eb162fe0dedc0760e94d981211d99edf7865f4d2b0f600592618577960745811c5222d4b03013c034eb0f27d822
- SSDEEP 98304:XtwgU4OxOwSjJw2z2C1BAUZLGNYQkktANxYhhBTfvQW49YAG/:XFXV2aW3
- TLSH T1E1169D43F2D268EDD667C134865B9733B735FC601612AF6B2624F6342E72EE02E48B51
- MD5 SHA1 SHA512 SSDEEP TLSH
Score9/10-
Detects executables Discord URL observed in first stage droppers
-
Contacts third-party web service commonly abused for C2
Legitimate web (hosting) services can be abused by malware authors to host malware or C2s.