General
- Target 2026-09-28_131160f9826b63408f56cca4a698c1e4_elex_glassworm_redline-stealer_stop
- Size 1.8MB
- Sample260928-wpap9acb74
- SHA256 b9067f1306505016d7e362f20505d211786260b4080c51bf4139d178cb3cf52b
- MD5 131160f9826b63408f56cca4a698c1e4
- SHA1 3eb8fd545761a3b585d709806706944c44f4f961
- SHA512 26d4ff5525e8b8148f667bbff57a675a4bca9ef3dddd53dbc9bff1b3a0f0883f65ab91ec6b15e8edb36fba366b26ccaa24e75f7dd42a04a45b270485c1480241
- SSDEEP 24576:Y8h4aPlfTUYDrQOfseBC1+ZnoBzEgY5cfPtQE3WV9UKkjhmKiKSqSWLPPgIze7mg:Y1U9T8ZDYWntr3WVajD4I3VGi2/Z
- TLSH T181959D61FBCAC0F6DE4B12B41066D72FAFB1831857356EE363902F4959B72D1AC36218
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
10/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-09-28_131160f9826b63408f56cca4a698c1e4_elex_glassworm_redline-stealer_stop.exe
Resource
win10v2004-20260911-en
6 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-09-28_131160f9826b63408f56cca4a698c1e4_elex_glassworm_redline-stealer_stop
- Size 1.8MB
- SHA256 b9067f1306505016d7e362f20505d211786260b4080c51bf4139d178cb3cf52b
- MD5 131160f9826b63408f56cca4a698c1e4
- SHA1 3eb8fd545761a3b585d709806706944c44f4f961
- SHA512 26d4ff5525e8b8148f667bbff57a675a4bca9ef3dddd53dbc9bff1b3a0f0883f65ab91ec6b15e8edb36fba366b26ccaa24e75f7dd42a04a45b270485c1480241
- SSDEEP 24576:Y8h4aPlfTUYDrQOfseBC1+ZnoBzEgY5cfPtQE3WV9UKkjhmKiKSqSWLPPgIze7mg:Y1U9T8ZDYWntr3WVajD4I3VGi2/Z
- TLSH T181959D61FBCAC0F6DE4B12B41066D72FAFB1831857356EE363902F4959B72D1AC36218
- MD5 SHA1 SHA512 SSDEEP TLSH
Score10/10-
UAC bypass
-
UPX dump on OEP (original entry point)
-
Checks whether UAC is enabled
MITRE ATT&CK Enterprise v16
Privilege Escalation
Abuse Elevation Control Mechanism
1Bypass User Account Control
1Defense Evasion
Abuse Elevation Control Mechanism
1Bypass User Account Control
1Impair Defenses
1Disable or Modify Tools
1Modify Registry
2