General
- Target 2026-09-28_8d8057aea8b0d556ce37d0f741927c59_elex_glassworm_redline-stealer_stop
- Size 1.8MB
- Sample260928-raq2gawbme
- SHA256 6938f1392a42ff40070319f4f3f0e96a524de0036dbf5c77f96893d15d1e5a81
- MD5 8d8057aea8b0d556ce37d0f741927c59
- SHA1 c5dbbfc1a08d847026492d0748d691a8f393e92f
- SHA512 f6f4b78ca7a5487f94febfb91ee151ebad0e9d562437b02ef7f9a9dc65b29d5d1ca8e5ac7b6724fe882549051d5a5a1e4504664001439051cffc32fbbe7efab0
- SSDEEP 24576:Y8h4aPlfTUYDrQOfseBC1+ZnoBzEgY5cfPtQE3WV9UKkjhmKiKSqSWLPPgIze7mx:Y1U9T8ZDYWntr3WVajD4I3VGiSs
- TLSH T126959E61FBCAC0F6DE4B12B41066D72FAFB1831857356AE363902F4959B72D1AC36318
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
10/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-09-28_8d8057aea8b0d556ce37d0f741927c59_elex_glassworm_redline-stealer_stop.exe
Resource
win10v2004-20260911-en
7 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-09-28_8d8057aea8b0d556ce37d0f741927c59_elex_glassworm_redline-stealer_stop
- Size 1.8MB
- SHA256 6938f1392a42ff40070319f4f3f0e96a524de0036dbf5c77f96893d15d1e5a81
- MD5 8d8057aea8b0d556ce37d0f741927c59
- SHA1 c5dbbfc1a08d847026492d0748d691a8f393e92f
- SHA512 f6f4b78ca7a5487f94febfb91ee151ebad0e9d562437b02ef7f9a9dc65b29d5d1ca8e5ac7b6724fe882549051d5a5a1e4504664001439051cffc32fbbe7efab0
- SSDEEP 24576:Y8h4aPlfTUYDrQOfseBC1+ZnoBzEgY5cfPtQE3WV9UKkjhmKiKSqSWLPPgIze7mx:Y1U9T8ZDYWntr3WVajD4I3VGiSs
- TLSH T126959E61FBCAC0F6DE4B12B41066D72FAFB1831857356AE363902F4959B72D1AC36318
- MD5 SHA1 SHA512 SSDEEP TLSH
Score10/10-
UAC bypass
-
UPX dump on OEP (original entry point)
-
Checks whether UAC is enabled
MITRE ATT&CK Enterprise v16
Privilege Escalation
Abuse Elevation Control Mechanism
1Bypass User Account Control
1Defense Evasion
Abuse Elevation Control Mechanism
1Bypass User Account Control
1Impair Defenses
1Disable or Modify Tools
1Modify Registry
2