General
- Target 2026-09-12_eb53dc9be1db38a687f73b27de558ec5_glassworm_snatch
- Size 9.8MB
- Sample260912-ssmbnsbk2t
- SHA256 a80938e8eaafd4d04930b86cb3be6d2b5a12015899be5476140584d3e9943406
- MD5 eb53dc9be1db38a687f73b27de558ec5
- SHA1 9a1f530d388b18aa740a9f3582c45752472b487d
- SHA512 a76f69d4bfd2c2bfb922d6aa0618c17c33e9863da6f053bbed753cc7eed8bd7bcdb6248a807ad31149dd5dda74537d7635b2e0665be6547f1587dcc3f9b8719e
- SSDEEP 196608:k4JE6Tki//Nk/vnuhRthR8hRbhRLhROhRVhR6hRfhRJhRq:L/kilMvKR/RgRtRdRqRXRORpRDRq
- TLSH T17EA6D02127EC8A6AD6EF977BE072051A0BF1E527711FEB4D9C8494FE2C4375588423A3
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
10/10
Behavioral task
behavioral1
Sample
2026-09-12_eb53dc9be1db38a687f73b27de558ec5_glassworm_snatch.exe
Resource
win10v2004-20260911-en
7 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-09-12_eb53dc9be1db38a687f73b27de558ec5_glassworm_snatch.exe
Resource
win11ltsc2024-20260911-en
7 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-09-12_eb53dc9be1db38a687f73b27de558ec5_glassworm_snatch
- Size 9.8MB
- SHA256 a80938e8eaafd4d04930b86cb3be6d2b5a12015899be5476140584d3e9943406
- MD5 eb53dc9be1db38a687f73b27de558ec5
- SHA1 9a1f530d388b18aa740a9f3582c45752472b487d
- SHA512 a76f69d4bfd2c2bfb922d6aa0618c17c33e9863da6f053bbed753cc7eed8bd7bcdb6248a807ad31149dd5dda74537d7635b2e0665be6547f1587dcc3f9b8719e
- SSDEEP 196608:k4JE6Tki//Nk/vnuhRthR8hRbhRLhROhRVhR6hRfhRJhRq:L/kilMvKR/RgRtRdRqRXRORpRDRq
- TLSH T17EA6D02127EC8A6AD6EF977BE072051A0BF1E527711FEB4D9C8494FE2C4375588423A3
- MD5 SHA1 SHA512 SSDEEP TLSH
Score9/10-
Detects executables referencing virtualization MAC addresses
-
UPX dump on OEP (original entry point)
-
Adds Run key to start application
-
Drops desktop.ini file(s)
-
Drops file in System32 directory