2026-11-02_f06c043036ba1f8eb356a3596b3eb64c_conti_glassworm

Sharing

Copy URL Twitter E-mail

General

Target
2026-11-02_f06c043036ba1f8eb356a3596b3eb64c_conti_glassworm
Size 579KB
Sample261102-xbemqaex4p
SHA256 abfbf44b7917d9054668ccbbfb11e2ee65a85b54cf67dcf4987585322a6c74cb
MD5 f06c043036ba1f8eb356a3596b3eb64c
SHA1 7e1c015659e8bae185f014f5e7c1f064add35b73
SHA512 ba49912170649b94ccca9b3edf7864c0938ec9b33f5f265919f14c53cc6ff750ac9600b8847c457bdb2b3310dbcf26cf985584736567479c8fd860a3e2517f87
SSDEEP 12288:ywj9Lw63ct47h4QKAzYzTjjCtvvPxBpYAcmXwj9/:ywj9Lw63ct04QFzYTjo5BpYoXwj9/
TLSH
T1F9C44B16E34650B1DE7301B1015AEB7B9A34FD2884158A1EF78CE925BFB36D16A3D323
MD5 SHA1 SHA512 SSDEEP TLSH

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
2026-11-02_f06c043036ba1f8eb356a3596b3eb64c_conti_glassworm

File Explorer

2026-11-02_f06c043036ba1f8eb356a3596b3eb64c_conti_glassworm

.exe 579KB

2026-11-02_f06c043036ba1f8eb356a3596b3eb64c_conti_glassworm

SHA256 abfbf44b7917d9054668ccbbfb11e2ee65a85b54cf67dcf4987585322a6c74cb
MD5 f06c043036ba1f8eb356a3596b3eb64c
SHA1 7e1c015659e8bae185f014f5e7c1f064add35b73
SHA512 ba49912170649b94ccca9b3edf7864c0938ec9b33f5f265919f14c53cc6ff750ac9600b8847c457bdb2b3310dbcf26cf985584736567479c8fd860a3e2517f87
SSDEEP 12288:ywj9Lw63ct47h4QKAzYzTjjCtvvPxBpYAcmXwj9/:ywj9Lw63ct04QFzYTjo5BpYoXwj9/
TLSH
T1F9C44B16E34650B1DE7301B1015AEB7B9A34FD2884158A1EF78CE925BFB36D16A3D323
MD5 SHA1 SHA512 SSDEEP TLSH

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

Major OS version

Entry point

235056

Magic Number

523

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_GUARD_CF IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LARGE_ADDRESS_AWARE

PDB paths

Name

.text

Size

242KB

Virtual Size

241KB

Characteristics

IMAGE_SCN_CNT_CODE IMAGE_SCN_MEM_EXECUTE IMAGE_SCN_MEM_READ

Name

.rdata

Size

106KB

Virtual Size

106KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.data

Size

10KB

Virtual Size

13KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.pdata

Size

12KB

Virtual Size

11KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.didat

Size

2KB

Virtual Size

2KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.c2r

Size

512B

Virtual Size

356B

Characteristics

IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.rsrc

Size

187KB

Virtual Size

187KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.reloc

Size

5KB

Virtual Size

4KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_DISCARDABLE IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

File Explorer

2026-11-02_f06c043036ba1f8eb356a3596b3eb64c_conti_glassworm

generic