General
- Target 2026-11-03_68b9464c4d398940d19587eee2b8c561_elex_glassworm_stop
- Size 1.2MB
- Sample261104-wr5cmsyw2m
- SHA256 4b5123ac041cf9072e8f54032a6acb0fa6403bb9d9599a72694b286aa516123e
- MD5 68b9464c4d398940d19587eee2b8c561
- SHA1 abd73884250e2b96b39fabcb4d9d960755064ed5
- SHA512 d408c10a0f3bce0cd00c173436c09eed14674c8c522b86d0f7f480fa80311381a5e0cbaa6fd13fdd8b50b47c6998aae99906dca7ac64dd7e120db624e929c0bc
- SSDEEP 24576:o6BTkng4T7UXVOPsjDvfNSNVk/0gOGW9qg9sqjnhMgeiCl7G0nehbGZpbD:o6BTknHTgcPaak/07/97hDmg27RnWGj
- TLSH T15245DE2C7A80C436D0771670D65C8BA8F4B5B831867B088BB7C51A7D5B799C38A31F7A
- MD5 SHA1 SHA512 SSDEEP TLSH
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-11-03_68b9464c4d398940d19587eee2b8c561_elex_glassworm_stop.exe
Resource
win10v2004-20260911-en
11 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-11-03_68b9464c4d398940d19587eee2b8c561_elex_glassworm_stop
- Size 1.2MB
- SHA256 4b5123ac041cf9072e8f54032a6acb0fa6403bb9d9599a72694b286aa516123e
- MD5 68b9464c4d398940d19587eee2b8c561
- SHA1 abd73884250e2b96b39fabcb4d9d960755064ed5
- SHA512 d408c10a0f3bce0cd00c173436c09eed14674c8c522b86d0f7f480fa80311381a5e0cbaa6fd13fdd8b50b47c6998aae99906dca7ac64dd7e120db624e929c0bc
- SSDEEP 24576:o6BTkng4T7UXVOPsjDvfNSNVk/0gOGW9qg9sqjnhMgeiCl7G0nehbGZpbD:o6BTknHTgcPaak/07/97hDmg27RnWGj
- TLSH T15245DE2C7A80C436D0771670D65C8BA8F4B5B831867B088BB7C51A7D5B799C38A31F7A
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Executes dropped EXE
-
Enumerates connected drives
Attempts to read the root path of hard drives other than the default C: drive.
-
Drops file in System32 directory
MITRE ATT&CK Enterprise v16
Credential Access
Credentials from Password Stores
1Credentials from Web Browsers
1Unsecured Credentials
1Credentials In Files
1