General
- Target 2026-09-09_ed24ad6a90bf46be99bc037ec7cb05b3_glassworm_snatch
- Size 10.4MB
- Sample260910-1w3f3aeh44
- SHA256 42f5e568d035a28ee5ba281f1bc86b1fdf6cb38408f7d5d4a1358c6824a4b063
- MD5 ed24ad6a90bf46be99bc037ec7cb05b3
- SHA1 ef39a896606c9f00ec95fef10251250a4e12fd1f
- SHA512 3fefb71817e5f54711092bf316621953d5be703834c9153f4b86ec015ce2d1afe31d4b56b838acbbdbe259f1acfbce6a5b0e8471a4b960bf2f454cf954edafc3
- SSDEEP 196608:k4JE6Tki//Nk/vnuhRBhRHhRkhRqhRDhRAhRrhRRhRVhRNhRy:L/kilMvKRLRBR4R+RlR8R9RbRXRfRy
- TLSH T180B6D02427EC8A6AD2EF977BE072051A0BF5E527711FEB4D9C8494FE2C4375588423A3
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
10/10
Behavioral task
behavioral1
Sample
2026-09-09_ed24ad6a90bf46be99bc037ec7cb05b3_glassworm_snatch.exe
Resource
win10v2004-20260513-en
7 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-09-09_ed24ad6a90bf46be99bc037ec7cb05b3_glassworm_snatch.exe
Resource
win11ltsc2024-20260709-en
7 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-09-09_ed24ad6a90bf46be99bc037ec7cb05b3_glassworm_snatch
- Size 10.4MB
- SHA256 42f5e568d035a28ee5ba281f1bc86b1fdf6cb38408f7d5d4a1358c6824a4b063
- MD5 ed24ad6a90bf46be99bc037ec7cb05b3
- SHA1 ef39a896606c9f00ec95fef10251250a4e12fd1f
- SHA512 3fefb71817e5f54711092bf316621953d5be703834c9153f4b86ec015ce2d1afe31d4b56b838acbbdbe259f1acfbce6a5b0e8471a4b960bf2f454cf954edafc3
- SSDEEP 196608:k4JE6Tki//Nk/vnuhRBhRHhRkhRqhRDhRAhRrhRRhRVhRNhRy:L/kilMvKRLRBR4R+RlR8R9RbRXRfRy
- TLSH T180B6D02427EC8A6AD2EF977BE072051A0BF5E527711FEB4D9C8494FE2C4375588423A3
- MD5 SHA1 SHA512 SSDEEP TLSH
Score9/10-
Detects executables referencing virtualization MAC addresses
-
UPX dump on OEP (original entry point)
-
Adds Run key to start application
-
Drops desktop.ini file(s)
-
Drops file in System32 directory