2026-09-27_34ec6b13b3ca676de1719e563b02e620_conti_glassworm

Sharing

Copy URL Twitter E-mail

General

Target
2026-09-27_34ec6b13b3ca676de1719e563b02e620_conti_glassworm
Size 288KB
Sample260928-h5tleayale
SHA256 16c852ae0e7b27b2ae2fb3952739f9047533ab4e32c8160f15acad85b304cab4
MD5 34ec6b13b3ca676de1719e563b02e620
SHA1 5b10336155c13bdaf8d1fe610899cf83c2e9eaa3
SHA512 301e219b26d8d53cf4f891cd4540a59dc712e72ffc69738282771c1659c67f3817066f89d482e897b865fbd671343eeeb898ef729f97a1d82cb52d29b39c921a
SSDEEP 3072:8GS/UnVlwSkwxpqmOcmIwYH5byYpUY6+WSvm6680Uq:8ONtH5bZe/XUq
TLSH
T120547D16E79310FDD59AC17886D25E72E632BC090320AFEF2748E6715F31A914F7E612
MD5 SHA1 SHA512 SSDEEP TLSH

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
2026-09-27_34ec6b13b3ca676de1719e563b02e620_conti_glassworm

File Explorer

2026-09-27_34ec6b13b3ca676de1719e563b02e620_conti_glassworm

.exe 288KB

2026-09-27_34ec6b13b3ca676de1719e563b02e620_conti_glassworm

IMPHASH ce329319fc972d69ec98eaf7db13c616
SHA256 16c852ae0e7b27b2ae2fb3952739f9047533ab4e32c8160f15acad85b304cab4
MD5 34ec6b13b3ca676de1719e563b02e620
SHA1 5b10336155c13bdaf8d1fe610899cf83c2e9eaa3
SHA512 301e219b26d8d53cf4f891cd4540a59dc712e72ffc69738282771c1659c67f3817066f89d482e897b865fbd671343eeeb898ef729f97a1d82cb52d29b39c921a
SSDEEP 3072:8GS/UnVlwSkwxpqmOcmIwYH5byYpUY6+WSvm6680Uq:8ONtH5bZe/XUq
TLSH
T120547D16E79310FDD59AC17886D25E72E632BC090320AFEF2748E6715F31A914F7E612
MD5 SHA1 SHA512 SSDEEP TLSH

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

Major OS version

Entry point

192512

Magic Number

523

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_CUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_NX_COMPAT

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LINE_NUMS_STRIPPED IMAGE_FILE_LARGE_ADDRESS_AWARE IMAGE_FILE_DEBUG_STRIPPED

PDB paths

kernel32

AreFileApisANSI DeleteCriticalSection EnterCriticalSection GetCurrentProcess GetLastError GetModuleHandleA GetProcAddress InitializeCriticalSection IsDBCSLeadByteEx IsProcessorFeaturePresent LeaveCriticalSection LoadLibraryW MultiByteToWideChar SetUnhandledExceptionFilter Sleep TerminateProcess TlsGetValue VirtualProtect VirtualQuery WideCharToMultiByte __C_specific_handler

msvcrt

___lc_codepage_func ___mb_cur_max_func __getmainargs __initenv __iob_func __set_app_type __setusermatherr _amsg_exit _cexit _commode _errno _fdopen _fmode _initterm _isatty _lock _setmode _sopen _stat64 _unlink _unlock _utime64 _write abort atexit calloc clock exit fclose feof ferror fgetc fopen_s fprintf fputc fread free fseek ftell fwrite isleadbyte localeconv malloc memcpy signal strchr strcmp strcpy strerror strlen strncmp strrchr vfprintf wcslen

libbrotlidec

BrotliDecoderAttachDictionary BrotliDecoderCreateInstance BrotliDecoderDecompressStream BrotliDecoderDestroyInstance BrotliDecoderErrorString BrotliDecoderGetErrorCode BrotliDecoderSetMetadataCallbacks BrotliDecoderSetParameter

libbrotlienc

BrotliEncoderAttachPreparedDictionary BrotliEncoderCompressStream BrotliEncoderCreateInstance BrotliEncoderDestroyInstance BrotliEncoderDestroyPreparedDictionary BrotliEncoderIsFinished BrotliEncoderPrepareDictionary BrotliEncoderSetParameter

Name

.text

Size

45KB

Virtual Size

45KB

Characteristics

IMAGE_SCN_CNT_CODE IMAGE_SCN_MEM_EXECUTE IMAGE_SCN_MEM_READ

Name

.data

Size

512B

Virtual Size

304B

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.rdata

Size

10KB

Virtual Size

9KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.pdata

Size

1KB

Virtual Size

1KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.xdata

Size

1KB

Virtual Size

1KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.bss

Size

Virtual Size

2KB

Characteristics

IMAGE_SCN_CNT_UNINITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.idata

Size

4KB

Virtual Size

3KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.tls

Size

512B

Virtual Size

16B

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.rsrc

Size

1KB

Virtual Size

1KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.reloc

Size

42KB

Virtual Size

92KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_EXECUTE IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.rcdf1b

Size

152KB

Virtual Size

152KB

Characteristics

IMAGE_SCN_MEM_EXECUTE IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Sharing

General

Malware Config

Signatures

File Explorer

2026-09-27_34ec6b13b3ca676de1719e563b02e620_conti_glassworm

kernel32

msvcrt

libbrotlidec

libbrotlienc

generic