General
- Target 2026-09-16_3a22f699a55cdee72059333bc2dfccff_chir_elex_glassworm_hawkeye_maze_rhadamanthys_stealc_stop
- Size 263KB
- Sample260916-2fbh3sfa86
- SHA256 2692e920de93eb2ef979f26ed448a1d94370d59a6ebbe9861dfd28dfc1c45cf4
- MD5 3a22f699a55cdee72059333bc2dfccff
- SHA1 0f698c9b058c4ffc729eec4371de7e4b932ff385
- SHA512 b927352998140ab42709791c1389442fc7dbcacd424b461493c49c50f0740a9fc5f1e3529a13ee4c5f11ee8bf3715fd454d2641588a68279ad5ef7dcf73ad9b1
- SSDEEP 3072:6TIfW4QEXhW+cy7KRq+/wvUpvPUaMVnJl6d3+ApoAUZ9Z7Rev5q+SOdnrhV:6Twk+cy7KRL/YUIBgru776q8rh
- TLSH T1D3449E227AE58031D5B312B744F5B76146BEFD720A328E5B67D84F8D5A385C0A336B23
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
9/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-09-16_3a22f699a55cdee72059333bc2dfccff_chir_elex_glassworm_hawkeye_maze_rhadamanthys_stealc_stop.exe
Resource
win10v2004-20260911-en
9 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-09-16_3a22f699a55cdee72059333bc2dfccff_chir_elex_glassworm_hawkeye_maze_rhadamanthys_stealc_stop.exe
Resource
win11ltsc2024-20260911-en
2 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-09-16_3a22f699a55cdee72059333bc2dfccff_chir_elex_glassworm_hawkeye_maze_rhadamanthys_stealc_stop
- Size 263KB
- SHA256 2692e920de93eb2ef979f26ed448a1d94370d59a6ebbe9861dfd28dfc1c45cf4
- MD5 3a22f699a55cdee72059333bc2dfccff
- SHA1 0f698c9b058c4ffc729eec4371de7e4b932ff385
- SHA512 b927352998140ab42709791c1389442fc7dbcacd424b461493c49c50f0740a9fc5f1e3529a13ee4c5f11ee8bf3715fd454d2641588a68279ad5ef7dcf73ad9b1
- SSDEEP 3072:6TIfW4QEXhW+cy7KRq+/wvUpvPUaMVnJl6d3+ApoAUZ9Z7Rev5q+SOdnrhV:6Twk+cy7KRL/YUIBgru776q8rh
- TLSH T1D3449E227AE58031D5B312B744F5B76146BEFD720A328E5B67D84F8D5A385C0A336B23
- MD5 SHA1 SHA512 SSDEEP TLSH
Score9/10-
Detects binaries and memory artifacts referencing sandbox DLLs typically observed in sandbox evasion
-
Detects executables embedding registry key / value combination indicative of disabling Windows Defen
-
Executes dropped EXE
-
Adds Run key to start application