General
- Target 2026-09-29_28c89a902c4b9c78323b6e7c2e548bcf_akira_elex_glassworm_hijackloader_swisyn
- Size 1.9MB
- Sample260930-2tvh4ssyes
- SHA256 678eed781f328ea53d5da57bdb387155a4531c717eb808e9da75f158d7f42f67
- MD5 28c89a902c4b9c78323b6e7c2e548bcf
- SHA1 3326ffeb5df93d8adddcc25d2207b70a9d70d2c8
- SHA512 b047e77342454adc2705110eb699b25e61ead5c944b9910c38088b62abbe13359975bca6afed33af9776c101c8407ae2e0b4d079c94c08d0e199335c240f11b1
- SSDEEP 24576:PFOadhT6NJwYw+ySpr4+x93EUfa0xJSnq1pKQeCnWdbeUezvTPNwrXm4xzh+Otli:t6y4XdaRnSWtehwrX1BhlJW
- TLSH T1C3958D45FA93A6B8D94355B0612EB37FAE340B008725CDE7D7E0EE3066B25D1253B21E
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
10/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-09-29_28c89a902c4b9c78323b6e7c2e548bcf_akira_elex_glassworm_hijackloader_swisyn.exe
Resource
win10v2004-20260911-en
10 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-09-29_28c89a902c4b9c78323b6e7c2e548bcf_akira_elex_glassworm_hijackloader_swisyn.exe
Resource
win11ltsc2024-20260911-en
10 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-09-29_28c89a902c4b9c78323b6e7c2e548bcf_akira_elex_glassworm_hijackloader_swisyn
- Size 1.9MB
- SHA256 678eed781f328ea53d5da57bdb387155a4531c717eb808e9da75f158d7f42f67
- MD5 28c89a902c4b9c78323b6e7c2e548bcf
- SHA1 3326ffeb5df93d8adddcc25d2207b70a9d70d2c8
- SHA512 b047e77342454adc2705110eb699b25e61ead5c944b9910c38088b62abbe13359975bca6afed33af9776c101c8407ae2e0b4d079c94c08d0e199335c240f11b1
- SSDEEP 24576:PFOadhT6NJwYw+ySpr4+x93EUfa0xJSnq1pKQeCnWdbeUezvTPNwrXm4xzh+Otli:t6y4XdaRnSWtehwrX1BhlJW
- TLSH T1C3958D45FA93A6B8D94355B0612EB37FAE340B008725CDE7D7E0EE3066B25D1253B21E
- MD5 SHA1 SHA512 SSDEEP TLSH
Score10/10-
Modifies visibility of hidden/system files in Explorer
-
Executes dropped EXE
-
Adds Run key to start application
-
Drops file in System32 directory