General
- Target 2026-09-12_cfad013215686cebd7754a0dd3c623dd_glassworm_snatch
- Size 9.7MB
- Sample260912-vszccacm3v
- SHA256 75b101d3eea6add020ea3f530183e850f12337eb1afc0f869771fa73373d828b
- MD5 cfad013215686cebd7754a0dd3c623dd
- SHA1 d4f9acf6b5313e0f9fd98ca3cb90fd81d1c2374e
- SHA512 433be2b5b1dafa60cf09218df8da5ea51ef29d39d60258c4d4a8c041038fe619195cda72d18e368e633f3b5c32e42ee903098c7bd2701ba4b4000806094374ec
- SSDEEP 196608:k4JE6Tki//Nk/vnuhRthR8hRbhRLhROhRVhR6hRfhRJhRv:L/kilMvKR/RgRtRdRqRXRORpRDRv
- TLSH T1F0A6D02127EC8A6AD6EF977BE072051A0BF1E527711FEB4D9C8494FE2C4375588423A3
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
10/10
Behavioral task
behavioral1
Sample
2026-09-12_cfad013215686cebd7754a0dd3c623dd_glassworm_snatch.exe
Resource
win10v2004-20260911-en
7 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-09-12_cfad013215686cebd7754a0dd3c623dd_glassworm_snatch.exe
Resource
win11ltsc2024-20260911-en
7 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-09-12_cfad013215686cebd7754a0dd3c623dd_glassworm_snatch
- Size 9.7MB
- SHA256 75b101d3eea6add020ea3f530183e850f12337eb1afc0f869771fa73373d828b
- MD5 cfad013215686cebd7754a0dd3c623dd
- SHA1 d4f9acf6b5313e0f9fd98ca3cb90fd81d1c2374e
- SHA512 433be2b5b1dafa60cf09218df8da5ea51ef29d39d60258c4d4a8c041038fe619195cda72d18e368e633f3b5c32e42ee903098c7bd2701ba4b4000806094374ec
- SSDEEP 196608:k4JE6Tki//Nk/vnuhRthR8hRbhRLhROhRVhR6hRfhRJhRv:L/kilMvKR/RgRtRdRqRXRORpRDRv
- TLSH T1F0A6D02127EC8A6AD6EF977BE072051A0BF1E527711FEB4D9C8494FE2C4375588423A3
- MD5 SHA1 SHA512 SSDEEP TLSH
Score9/10-
Detects executables referencing virtualization MAC addresses
-
UPX dump on OEP (original entry point)
-
Adds Run key to start application
-
Drops desktop.ini file(s)
-
Drops file in System32 directory