2026-09-11_8d2091581ae66979873597d729de4bdf_chir_elex_glassworm_mafia

Sharing

Copy URL Twitter E-mail

General

Target
2026-09-11_8d2091581ae66979873597d729de4bdf_chir_elex_glassworm_mafia
Size 1003KB
Sample260912-jlrhdaff25
SHA256 cc751daa113e3060da1c6ad6780f7299c167218fe9bcbd65e0bf7c1bc896b1d3
MD5 8d2091581ae66979873597d729de4bdf
SHA1 58ba1ac01c81ce8140ab18e22dc4352fc2857d6d
SHA512 943359bf77cf75c84e114e68db768a6dc18c9386df6eb39bfcf761028dcfeebeacc878f702bbfc601324e5cfa47236d7efcd698008b9e39f79a2881546b5c39f
SSDEEP 12288:V84NQSXxgpBJYMxm0m+84TIFNUBqWyhqsyhzYbEzucrHkJJZ9AV3fF7Vq2QlY:VnZKK34PTsn/y5YbErrHkx9A99Jq
TLSH
T19D251B117D458A63C9AE09F8B43F988841AB7E406E95A0E3F27872925E707C7E37734D
MD5 SHA1 SHA512 SSDEEP TLSH

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
2026-09-11_8d2091581ae66979873597d729de4bdf_chir_elex_glassworm_mafia

File Explorer

2026-09-11_8d2091581ae66979873597d729de4bdf_chir_elex_glassworm_mafia

.exe 1003KB

2026-09-11_8d2091581ae66979873597d729de4bdf_chir_elex_glassworm_mafia

IMPHASH e879ba3e028bb21b52e8efb1b68c0f32
SHA256 cc751daa113e3060da1c6ad6780f7299c167218fe9bcbd65e0bf7c1bc896b1d3
MD5 8d2091581ae66979873597d729de4bdf
SHA1 58ba1ac01c81ce8140ab18e22dc4352fc2857d6d
SHA512 943359bf77cf75c84e114e68db768a6dc18c9386df6eb39bfcf761028dcfeebeacc878f702bbfc601324e5cfa47236d7efcd698008b9e39f79a2881546b5c39f
SSDEEP 12288:V84NQSXxgpBJYMxm0m+84TIFNUBqWyhqsyhzYbEzucrHkJJZ9AV3fF7Vq2QlY:VnZKK34PTsn/y5YbErrHkx9A99Jq
TLSH
T19D251B117D458A63C9AE09F8B43F988841AB7E406E95A0E3F27872925E707C7E37734D
MD5 SHA1 SHA512 SSDEEP TLSH

windows:5 windows x86 arch:x86

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

Major OS version

Entry point

1043968

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths

D:\qb\workspace\ubit\Installers\GFX_Installer\PrInstaller\ASE_Installers\HDMI\Release\GFX.pdb

kernel32

GetSystemDirectoryW GetEnvironmentVariableW GetTempPathW GetTempFileNameW CopyFileW CompareFileTime MoveFileW RemoveDirectoryW GetCurrentDirectoryW CreateFileW GetFileSize ReadFile MultiByteToWideChar GetFileTime FileTimeToSystemTime SystemTimeToTzSpecificLocalTime LoadLibraryW CreateMutexW CreateThread lstrlenW GetPrivateProfileStringW GetLocalTime GetCommandLineW GetTickCount SetFilePointer WriteFile EnumResourceLanguagesW GetUserDefaultLangID GetUserDefaultUILanguage GetVersion ConvertDefaultLocale GetLocaleInfoW GetCurrentProcess GetSystemInfo GetSystemWow64DirectoryW OpenProcess CreateToolhelp32Snapshot Process32FirstW Process32NextW TerminateProcess GetExitCodeProcess CreateEventW SetEvent GlobalAlloc GlobalLock GlobalUnlock GetFileAttributesW ExitProcess GetProcessHeap SetEndOfFile HeapReAlloc IsValidLocale EnumSystemLocalesA GetLocaleInfoA GetUserDefaultLCID GetSystemTimeAsFileTime GetCurrentProcessId QueryPerformanceCounter GetEnvironmentStringsW FreeEnvironmentStringsW FlushFileBuffers IsValidCodePage GetOEMCP GetACP HeapSize IsProcessorFeaturePresent WriteConsoleW SetStdHandle InitializeCriticalSectionAndSpinCount SetHandleCount GetCurrentThreadId GetFileType HeapCreate GetStdHandle IsDebuggerPresent SetUnhandledExceptionFilter UnhandledExceptionFilter LCMapStringW RtlUnwind GetStartupInfoW HeapSetInformation GetCPInfo GetConsoleMode GetConsoleCP HeapFree HeapAlloc DecodePointer FreeLibrary GetProcAddress LoadLibraryExW SetErrorMode Sleep SetFileAttributesW MoveFileExW DeleteFileW WaitForSingleObject CreateProcessW SetLastError VerifyVersionInfoW GetWindowsDirectoryW VerSetConditionMask FindNextFileW FindClose FindFirstFileW GetVersionExW LocalFree GetModuleFileNameW GetLastError SizeofResource LockResource LoadResource FindResourceW GetModuleHandleW TlsSetValue SetFileAttributesA SetFileTime LocalFileTimeToFileTime DosDateTimeToFileTime TlsGetValue WideCharToMultiByte CloseHandle CreateFileA TlsFree GlobalFree TlsAlloc EncodePointer LeaveCriticalSection EnterCriticalSection DeleteCriticalSection InitializeCriticalSection GetStringTypeW InterlockedCompareExchange InterlockedDecrement InterlockedIncrement RaiseException LoadLibraryA InterlockedExchange LocalAlloc

user32

GetDlgItem wsprintfW SendMessageW ShowWindow EndDialog SetDlgItemTextW SetTimer SendDlgItemMessageW KillTimer MessageBoxW DialogBoxIndirectParamW MonitorFromWindow GetMonitorInfoW OffsetRect AdjustWindowRect GetWindowRect DrawTextW GetSystemMetrics SetRectEmpty SendInput PostMessageW EnableWindow GetSystemMenu EnableMenuItem SetFocus FillRect GetWindowLongW SetWindowLongW SetWindowPos SetWindowTextW GetClientRect ReleaseDC GetWindowTextW GetWindowTextLengthW GetDC MessageBoxIndirectW LoadImageW SendMessageTimeoutW ExitWindowsEx EnumWindows GetWindowThreadProcessId GetWindowModuleFileNameW LoadStringW DialogBoxParamW LoadIconW

gdi32

SetBkMode SetTextColor GetStockObject DeleteDC StretchBlt BitBlt CreateCompatibleDC GetObjectW GetTextExtentPoint32W SelectObject DeleteObject CreateFontW GetDeviceCaps

advapi32

LookupPrivilegeValueW OpenProcessToken DeleteService ControlService QueryServiceConfigW StartServiceW CloseServiceHandle ChangeServiceConfigW ChangeServiceConfig2W CreateServiceW OpenServiceW OpenSCManagerW QueryServiceStatus RegEnumKeyExW RegDeleteValueW RegQueryInfoKeyW RegDeleteKeyW IsTextUnicode RegSetValueExW RegCreateKeyExW SetNamedSecurityInfoW GetNamedSecurityInfoW RegEnumValueW RegCloseKey RegQueryValueExW RegOpenKeyExW AdjustTokenPrivileges

ole32

CoInitialize CLSIDFromString CoInitializeEx PropVariantClear CoUninitialize CoTaskMemFree CoCreateInstance

oleaut32

SysFreeString SysAllocString VariantClear

newdev

DiInstallDriverW

Sharing

General

Malware Config

Signatures

File Explorer

2026-09-11_8d2091581ae66979873597d729de4bdf_chir_elex_glassworm_mafia

kernel32

user32

gdi32

advapi32

ole32

oleaut32

newdev

generic