General
- Target 2026-09-29_38e8b802046357e03dcf6b56922408a9_elex_glassworm_redline-stealer_stop
- Size 2.0MB
- Sample260930-dhpayssbpb
- SHA256 52d17de5b752d5121f22784b03690e5ab12069aa01f7afe88414f96e0dca044b
- MD5 38e8b802046357e03dcf6b56922408a9
- SHA1 77c3a8067078a1001a0ff569129f1d1ce45e71c7
- SHA512 3386489fb83c308f99c4f130d36014c9cdbb43c6c009b5d91375ed995868154eb4815095de2a84e3c19602bee875ce5686512f171f1fe47090468847893b2a39
- SSDEEP 24576:Y8h4aPlfTUYDrQOfseBC1+ZnoBzEgY5cfPtQE3WV9UKkjhmKiKSqSWLPPgIze7mZ:Y1U9T8ZDYWntr3WVajD4I3VGijH
- TLSH T1CA959E61FBC6C0F6DE4B22B41466D72FAFB1831857356EE363902F4959B32D1AC36218
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
10/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-09-29_38e8b802046357e03dcf6b56922408a9_elex_glassworm_redline-stealer_stop.exe
Resource
win10v2004-20260911-en
7 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-09-29_38e8b802046357e03dcf6b56922408a9_elex_glassworm_redline-stealer_stop
- Size 2.0MB
- SHA256 52d17de5b752d5121f22784b03690e5ab12069aa01f7afe88414f96e0dca044b
- MD5 38e8b802046357e03dcf6b56922408a9
- SHA1 77c3a8067078a1001a0ff569129f1d1ce45e71c7
- SHA512 3386489fb83c308f99c4f130d36014c9cdbb43c6c009b5d91375ed995868154eb4815095de2a84e3c19602bee875ce5686512f171f1fe47090468847893b2a39
- SSDEEP 24576:Y8h4aPlfTUYDrQOfseBC1+ZnoBzEgY5cfPtQE3WV9UKkjhmKiKSqSWLPPgIze7mZ:Y1U9T8ZDYWntr3WVajD4I3VGijH
- TLSH T1CA959E61FBC6C0F6DE4B22B41466D72FAFB1831857356EE363902F4959B32D1AC36218
- MD5 SHA1 SHA512 SSDEEP TLSH
Score10/10-
UAC bypass
-
UPX dump on OEP (original entry point)
-
Checks whether UAC is enabled
MITRE ATT&CK Enterprise v16
Privilege Escalation
Abuse Elevation Control Mechanism
1Bypass User Account Control
1Defense Evasion
Abuse Elevation Control Mechanism
1Bypass User Account Control
1Impair Defenses
1Disable or Modify Tools
1Modify Registry
2