General
- Target 2026-09-12_5a8b8498b9f69ec4b71dd80e99abaf9b_glassworm_snatch
- Size 9.6MB
- Sample260913-bmg2bsyhpd
- SHA256 362432786f24eb73a589ba6b55544ae29d573da38d100d580ad3cf52fbfec429
- MD5 5a8b8498b9f69ec4b71dd80e99abaf9b
- SHA1 6f1d890c18f62eb09df8b8e667b1f6c694170578
- SHA512 b654c774ba291a0ab60c7ed74b5b8c6a72e014357e53adaa2b5ee79241ae1d217e735c1bc6914011d86921a0be0c4e9762744cd8b2febe8414c3e1a8592d43a9
- SSDEEP 196608:k4JE6Tki//Nk/vnuhRBhRHhRkhRqhRDhRAhRrhRRhREhR:L/kilMvKRLRBR4R+RlR8R9RbRYR
- TLSH T1DFA6D02427EC8A6AD2EF977BE072051A0BF5E527711FEB4D9C8494FE2C4375588423A3
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
10/10
Behavioral task
behavioral1
Sample
2026-09-12_5a8b8498b9f69ec4b71dd80e99abaf9b_glassworm_snatch.exe
Resource
win10v2004-20260911-en
7 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-09-12_5a8b8498b9f69ec4b71dd80e99abaf9b_glassworm_snatch.exe
Resource
win11ltsc2024-20260911-en
7 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-09-12_5a8b8498b9f69ec4b71dd80e99abaf9b_glassworm_snatch
- Size 9.6MB
- SHA256 362432786f24eb73a589ba6b55544ae29d573da38d100d580ad3cf52fbfec429
- MD5 5a8b8498b9f69ec4b71dd80e99abaf9b
- SHA1 6f1d890c18f62eb09df8b8e667b1f6c694170578
- SHA512 b654c774ba291a0ab60c7ed74b5b8c6a72e014357e53adaa2b5ee79241ae1d217e735c1bc6914011d86921a0be0c4e9762744cd8b2febe8414c3e1a8592d43a9
- SSDEEP 196608:k4JE6Tki//Nk/vnuhRBhRHhRkhRqhRDhRAhRrhRRhREhR:L/kilMvKRLRBR4R+RlR8R9RbRYR
- TLSH T1DFA6D02427EC8A6AD2EF977BE072051A0BF5E527711FEB4D9C8494FE2C4375588423A3
- MD5 SHA1 SHA512 SSDEEP TLSH
Score9/10-
Detects executables referencing virtualization MAC addresses
-
UPX dump on OEP (original entry point)
-
Adds Run key to start application
-
Drops desktop.ini file(s)
-
Drops file in System32 directory