General
- Target 2026-09-10_638ce2d24607f50febcd281050660947_glassworm_snatch
- Size 9.8MB
- Sample260910-tj2knsscjc
- SHA256 dd72c23e61d65baeae1a6aa5b3616463309513d1a1c8459248419f77a77f53bd
- MD5 638ce2d24607f50febcd281050660947
- SHA1 c270b305e84246780933b8021604473b2f265738
- SHA512 4106e3534d12b5ba909a21f1c7d3a397186d9260c6365a074cad8c007abcad699f26bee40d486f452e05d5b56f859a65c90d35543f9ea39ac5aee0602e5f3b34
- SSDEEP 196608:k4JE6Tki//Nk/vnuhRthR8hRbhRLhROhRVhR6hRkhRthRN:L/kilMvKR/RgRtRdRqRXROR4R/RN
- TLSH T14DA6D02527EC8A6AD2EF937BE072051A0BF1E527711FEB4D9C8494FE2D4375588423A3
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
10/10
Behavioral task
behavioral1
Sample
2026-09-10_638ce2d24607f50febcd281050660947_glassworm_snatch.exe
Resource
win10v2004-20260513-en
7 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-09-10_638ce2d24607f50febcd281050660947_glassworm_snatch.exe
Resource
win11ltsc2024-20260709-en
7 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-09-10_638ce2d24607f50febcd281050660947_glassworm_snatch
- Size 9.8MB
- SHA256 dd72c23e61d65baeae1a6aa5b3616463309513d1a1c8459248419f77a77f53bd
- MD5 638ce2d24607f50febcd281050660947
- SHA1 c270b305e84246780933b8021604473b2f265738
- SHA512 4106e3534d12b5ba909a21f1c7d3a397186d9260c6365a074cad8c007abcad699f26bee40d486f452e05d5b56f859a65c90d35543f9ea39ac5aee0602e5f3b34
- SSDEEP 196608:k4JE6Tki//Nk/vnuhRthR8hRbhRLhROhRVhR6hRkhRthRN:L/kilMvKR/RgRtRdRqRXROR4R/RN
- TLSH T14DA6D02527EC8A6AD2EF937BE072051A0BF1E527711FEB4D9C8494FE2D4375588423A3
- MD5 SHA1 SHA512 SSDEEP TLSH
Score9/10-
Detects executables referencing virtualization MAC addresses
-
UPX dump on OEP (original entry point)
-
Adds Run key to start application
-
Drops desktop.ini file(s)
-
Drops file in System32 directory