2026-10-16_5e171d699e9d26cf86066526cd7ea5b0_conti_elex_floxif_glassworm

Sharing

Copy URL Twitter E-mail

General

Target
2026-10-16_5e171d699e9d26cf86066526cd7ea5b0_conti_elex_floxif_glassworm
Size 460KB
Sample261017-tx48qaav4z
SHA256 70d08ace681c04281e46ab73ce1118b940ea9137faf98bccbe834d7b6139f6db
MD5 5e171d699e9d26cf86066526cd7ea5b0
SHA1 8c04052a0ec703a6d0da28eafe44245120189257
SHA512 73c33a3e05c7673009376bedf7c1975928577a051516ae1097629a0357b458c8dedf27bde3fb1dcb2d4dc58c7a7bcc6b38f67d6173940a08b7d29f05a3cd6daf
SSDEEP 6144:FsIsTtDMJaawJYJjL+6dO9F2rW5xxv25BJIZyfJsF1EtNIBBzJVNDl5zDBV+UdvF:Fsbh0BkWX+Kwj6bUi0kNMlL/BjvrEH7E
TLSH
T198A46B90F292FFF6F80887BE20E2130991EFA1D4DB1DE7272950FD68054EE598273995
MD5 SHA1 SHA512 SSDEEP TLSH

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
2026-10-16_5e171d699e9d26cf86066526cd7ea5b0_conti_elex_floxif_glassworm

File Explorer

2026-10-16_5e171d699e9d26cf86066526cd7ea5b0_conti_elex_floxif_glassworm

.exe 460KB

2026-10-16_5e171d699e9d26cf86066526cd7ea5b0_conti_elex_floxif_glassworm

IMPHASH 33ff4568f459bd8b5afe9db47cdf4087
SHA256 70d08ace681c04281e46ab73ce1118b940ea9137faf98bccbe834d7b6139f6db
MD5 5e171d699e9d26cf86066526cd7ea5b0
SHA1 8c04052a0ec703a6d0da28eafe44245120189257
SHA512 73c33a3e05c7673009376bedf7c1975928577a051516ae1097629a0357b458c8dedf27bde3fb1dcb2d4dc58c7a7bcc6b38f67d6173940a08b7d29f05a3cd6daf
SSDEEP 6144:FsIsTtDMJaawJYJjL+6dO9F2rW5xxv25BJIZyfJsF1EtNIBBzJVNDl5zDBV+UdvF:Fsbh0BkWX+Kwj6bUi0kNMlL/BjvrEH7E
TLSH
T198A46B90F292FFF6F80887BE20E2130991EFA1D4DB1DE7272950FD68054EE598273995
MD5 SHA1 SHA512 SSDEEP TLSH

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

Major OS version

Entry point

5280

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_CUI

DLL Characteristics

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LINE_NUMS_STRIPPED IMAGE_FILE_32BIT_MACHINE

PDB paths

libimobiledevice

idevice_free idevice_new_with_options idevice_set_debug_level lockdownd_client_free lockdownd_client_new lockdownd_client_new_with_handshake lockdownd_get_value lockdownd_strerror

kernel32

DeleteCriticalSection EnterCriticalSection FreeLibrary GetCurrentProcess GetCurrentProcessId GetCurrentThreadId GetLastError GetModuleHandleA GetProcAddress GetStartupInfoA GetSystemTimeAsFileTime GetTickCount InitializeCriticalSection LeaveCriticalSection LoadLibraryA QueryPerformanceCounter SetUnhandledExceptionFilter Sleep TerminateProcess TlsGetValue UnhandledExceptionFilter VirtualProtect VirtualQuery

msvcrt

__getmainargs __initenv __lconv_init __p___argv __p__acmdln __p__fmode __set_app_type __setusermatherr _amsg_exit _cexit _initterm _iob _onexit _strdup abort calloc exit fclose fopen fprintf fputc fputs fread free fseek ftell fwrite getenv localtime malloc memcpy printf puts rand realloc rewind signal sprintf srand strchr strcpy strftime strlen strncmp time strrchr strstr toupper vfprintf

libplist

plist_array_get_item plist_array_get_size plist_dict_new_iter plist_dict_next_item plist_free plist_from_bin plist_from_xml plist_get_bool_val plist_get_data_val plist_get_date_val plist_get_key_val plist_get_node_type plist_get_real_val plist_get_string_val plist_get_uint_val plist_to_bin plist_to_xml

Name

.text

Size

14KB

Virtual Size

13KB

Characteristics

IMAGE_SCN_CNT_CODE IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_EXECUTE IMAGE_SCN_MEM_READ

Name

.data

Size

512B

Virtual Size

268B

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.rdata

Size

5KB

Virtual Size

4KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

Size

4KB

Virtual Size

3KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.bss

Size

Virtual Size

1012B

Characteristics

IMAGE_SCN_CNT_UNINITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.idata

Size

3KB

Virtual Size

2KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.CRT

Size

512B

Virtual Size

52B

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.tls

Size

512B

Virtual Size

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.rsrc

Size

1KB

Virtual Size

1KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

/14

Size

1024B

Virtual Size

808B

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_DISCARDABLE IMAGE_SCN_MEM_READ

Name

/29

Size

277KB

Virtual Size

277KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_DISCARDABLE IMAGE_SCN_MEM_READ

Name

/41

Size

10KB

Virtual Size

10KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_DISCARDABLE IMAGE_SCN_MEM_READ

Name

/55

Size

12KB

Virtual Size

12KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_DISCARDABLE IMAGE_SCN_MEM_READ

Name

/67

Size

2KB

Virtual Size

2KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_DISCARDABLE IMAGE_SCN_MEM_READ

Name

/78

Size

9KB

Virtual Size

8KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_DISCARDABLE IMAGE_SCN_MEM_READ

Name

/89

Size

1024B

Virtual Size

736B

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_DISCARDABLE IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

File Explorer

2026-10-16_5e171d699e9d26cf86066526cd7ea5b0_conti_elex_floxif_glassworm

libimobiledevice

kernel32

msvcrt

libplist

generic