General
- Target 2026-09-23_0877b59b57233d61f2e58bc64b2d7c05_glassworm_snatch
- Size 11.1MB
- Sample260924-scmx9sff87
- SHA256 ccecd4122ff7ed2c8379f990bdfe28075e319c4106c8b8fff6d7c9752ad7d460
- MD5 0877b59b57233d61f2e58bc64b2d7c05
- SHA1 bcd350c492bfc8c9d3d2672137d20a10661c48e9
- SHA512 b1d11ae6d0169d147a8f046c984ed3b8290f35641d8ef0f5c9ca1075878eb334e5ca66b05eccce29493dae251e428838b3c46ffcebb23a81dbb9bb8a6d309b6a
- SSDEEP 196608:k4JE6Tki//Nk/vnuhRBhRHhRkhRqhRDhRAhRrhRRhREhRahR9hRC:L/kilMvKRLRBR4R+RlR8R9RbRYRuRPRC
- TLSH T1B9C6D02427EC8A6AD2EF977BE072051A0BF5E127711FEB4D9C8494FE2D4375588423A3
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
10/10
Behavioral task
behavioral1
Sample
2026-09-23_0877b59b57233d61f2e58bc64b2d7c05_glassworm_snatch.exe
Resource
win10v2004-20260911-en
7 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-09-23_0877b59b57233d61f2e58bc64b2d7c05_glassworm_snatch.exe
Resource
win11ltsc2024-20260911-en
7 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-09-23_0877b59b57233d61f2e58bc64b2d7c05_glassworm_snatch
- Size 11.1MB
- SHA256 ccecd4122ff7ed2c8379f990bdfe28075e319c4106c8b8fff6d7c9752ad7d460
- MD5 0877b59b57233d61f2e58bc64b2d7c05
- SHA1 bcd350c492bfc8c9d3d2672137d20a10661c48e9
- SHA512 b1d11ae6d0169d147a8f046c984ed3b8290f35641d8ef0f5c9ca1075878eb334e5ca66b05eccce29493dae251e428838b3c46ffcebb23a81dbb9bb8a6d309b6a
- SSDEEP 196608:k4JE6Tki//Nk/vnuhRBhRHhRkhRqhRDhRAhRrhRRhREhRahR9hRC:L/kilMvKRLRBR4R+RlR8R9RbRYRuRPRC
- TLSH T1B9C6D02427EC8A6AD2EF977BE072051A0BF5E127711FEB4D9C8494FE2D4375588423A3
- MD5 SHA1 SHA512 SSDEEP TLSH
Score9/10-
Detects executables referencing virtualization MAC addresses
-
UPX dump on OEP (original entry point)
-
Adds Run key to start application
-
Drops desktop.ini file(s)
-
Drops file in System32 directory