2026-09-16_3a22f699a55cdee72059333bc2dfccff_chir_elex_glassworm_hawkeye_maze_rhadamanthys_stealc_stop

General

Target
2026-09-16_3a22f699a55cdee72059333bc2dfccff_chir_elex_glassworm_hawkeye_maze_rhadamanthys_stealc_stop
Size 263KB
Sample260916-2fbh3sfa86
SHA256 2692e920de93eb2ef979f26ed448a1d94370d59a6ebbe9861dfd28dfc1c45cf4
MD5 3a22f699a55cdee72059333bc2dfccff
SHA1 0f698c9b058c4ffc729eec4371de7e4b932ff385
SHA512 b927352998140ab42709791c1389442fc7dbcacd424b461493c49c50f0740a9fc5f1e3529a13ee4c5f11ee8bf3715fd454d2641588a68279ad5ef7dcf73ad9b1
SSDEEP 3072:6TIfW4QEXhW+cy7KRq+/wvUpvPUaMVnJl6d3+ApoAUZ9Z7Rev5q+SOdnrhV:6Twk+cy7KRL/YUIBgru776q8rh
TLSH
T1D3449E227AE58031D5B312B744F5B76146BEFD720A328E5B67D84F8D5A385C0A336B23
MD5 SHA1 SHA512 SSDEEP TLSH

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
2026-09-16_3a22f699a55cdee72059333bc2dfccff_chir_elex_glassworm_hawkeye_maze_rhadamanthys_stealc_stop

File Explorer

2026-09-16_3a22f699a55cdee72059333bc2dfccff_chir_elex_glassworm_hawkeye_maze_rhadamanthys_stealc_stop

.exe 263KB

2026-09-16_3a22f699a55cdee72059333bc2dfccff_chir_elex_glassworm_hawkeye_maze_rhadamanthys_stealc_stop

IMPHASH 3f0680eed0c1710d507ab05f87627de6
SHA256 2692e920de93eb2ef979f26ed448a1d94370d59a6ebbe9861dfd28dfc1c45cf4
MD5 3a22f699a55cdee72059333bc2dfccff
SHA1 0f698c9b058c4ffc729eec4371de7e4b932ff385
SHA512 b927352998140ab42709791c1389442fc7dbcacd424b461493c49c50f0740a9fc5f1e3529a13ee4c5f11ee8bf3715fd454d2641588a68279ad5ef7dcf73ad9b1
SSDEEP 3072:6TIfW4QEXhW+cy7KRq+/wvUpvPUaMVnJl6d3+ApoAUZ9Z7Rev5q+SOdnrhV:6Twk+cy7KRL/YUIBgru776q8rh
TLSH
T1D3449E227AE58031D5B312B744F5B76146BEFD720A328E5B67D84F8D5A385C0A336B23
MD5 SHA1 SHA512 SSDEEP TLSH

windows:5 windows x86 arch:x86

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

1

Major OS version

5

Entry point

349440

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths

C:\hufari37\jileribalopetok\xig-niy.pdb

kernel32

HeapReAlloc FindResourceA GetNativeSystemInfo SetLocaleInfoA WritePrivateProfileStructA MapViewOfFile GetProfileIntW GetDefaultCommConfigW ReadConsoleA GetUserDefaultLCID WaitForSingleObject OpenSemaphoreA MoveFileWithProgressA GetTickCount WaitNamedPipeW EnumTimeFormatsA GetSystemDirectoryW Sleep FormatMessageW LeaveCriticalSection IsProcessorFeaturePresent GetVolumePathNamesForVolumeNameW VerifyVersionInfoA ReplaceFileA GetStringTypeExA FillConsoleOutputCharacterW GetLongPathNameW GetProcAddress GetFirmwareEnvironmentVariableW DefineDosDeviceA LoadLibraryA LocalAlloc WritePrivateProfileStringA MoveFileA SetConsoleCtrlHandler OpenEventA GetProfileStringA HeapLock GetTapeParameters FindFirstVolumeMountPointA GetModuleHandleA CreateMailslotA WriteProfileStringW EnumSystemLocalesW ExpandEnvironmentStringsW CloseHandle WriteConsoleW SetFilePointerEx SetStdHandle GetConsoleMode EncodePointer DecodePointer GetLastError ExitProcess GetModuleHandleExW AreFileApisANSI MultiByteToWideChar WideCharToMultiByte GetCommandLineA RaiseException RtlUnwind HeapSize HeapFree IsDebuggerPresent EnterCriticalSection DeleteCriticalSection FatalAppExitA UnhandledExceptionFilter SetUnhandledExceptionFilter SetLastError InitializeCriticalSectionAndSpinCount CreateEventW GetCurrentProcess TerminateProcess TlsAlloc TlsGetValue TlsSetValue TlsFree GetStartupInfoW GetModuleHandleW CreateSemaphoreW GetStdHandle WriteFile GetModuleFileNameW FreeLibrary LoadLibraryExW IsValidCodePage GetACP GetOEMCP GetCPInfo HeapAlloc GetCurrentThread GetCurrentThreadId GetProcessHeap GetFileType GetModuleFileNameA QueryPerformanceCounter GetCurrentProcessId GetSystemTimeAsFileTime GetEnvironmentStringsW FreeEnvironmentStringsW GetDateFormatW GetTimeFormatW CompareStringW LCMapStringW GetLocaleInfoW IsValidLocale OutputDebugStringW GetStringTypeW FlushFileBuffers GetConsoleCP CreateFileW

user32

GetScrollBarInfo MsgWaitForMultipleObjectsEx LoadKeyboardLayoutA GetMenuBarInfo

Sharing

General

Malware Config

Signatures

File Explorer

2026-09-16_3a22f699a55cdee72059333bc2dfccff_chir_elex_glassworm_hawkeye_maze_rhadamanthys_stealc_stop

kernel32

user32

generic