General
- Target 2026-04-26_d1435b1788a6346a434ddcadc03b9b83_akira_amadey_blankgrabber_elex_glassworm
- Size 172.6MB
- Sample260426-plefpsdv4n
- SHA256 fff29ab84b96a9938209fba427f269098e803b524730080f75d537da97c93e9d
- MD5 d1435b1788a6346a434ddcadc03b9b83
- SHA1 a7fec3ad6422dae68b9a1bad9f8e51e878a3bdbc
- SHA512 26cba77f599c9ed7def3ac9b45afaa9a4f64c208adbfc3ea948daa715283884a0db47188d44c439bb47df81bb2e2222b3f829ead5bf5333cfe6dab54671335cc
- SSDEEP 3145728:Jz8zuw5fAs3GqjPyu1SWJGJYcLlfodBFjUI5ZlvnGcgc4DuQKFE0S+:JgzzYqjly/Lp2HjUuZxGc2CP7S+
- TLSH T1BE883340FECB81F9DC5B1975602D633F9B3A5106C928CA57E7F00E19ACB6B3146AB11E
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
9/10
Static task
static1
Behavioral task
behavioral1
Sample
2026-04-26_d1435b1788a6346a434ddcadc03b9b83_akira_amadey_blankgrabber_elex_glassworm.exe
Resource
win10v2004-20260130-en
17 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-04-26_d1435b1788a6346a434ddcadc03b9b83_akira_amadey_blankgrabber_elex_glassworm.exe
Resource
win11-20260130-en
15 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-04-26_d1435b1788a6346a434ddcadc03b9b83_akira_amadey_blankgrabber_elex_glassworm
- Size 172.6MB
- SHA256 fff29ab84b96a9938209fba427f269098e803b524730080f75d537da97c93e9d
- MD5 d1435b1788a6346a434ddcadc03b9b83
- SHA1 a7fec3ad6422dae68b9a1bad9f8e51e878a3bdbc
- SHA512 26cba77f599c9ed7def3ac9b45afaa9a4f64c208adbfc3ea948daa715283884a0db47188d44c439bb47df81bb2e2222b3f829ead5bf5333cfe6dab54671335cc
- SSDEEP 3145728:Jz8zuw5fAs3GqjPyu1SWJGJYcLlfodBFjUI5ZlvnGcgc4DuQKFE0S+:JgzzYqjly/Lp2HjUuZxGc2CP7S+
- TLSH T1BE883340FECB81F9DC5B1975602D633F9B3A5106C928CA57E7F00E19ACB6B3146AB11E
- MD5 SHA1 SHA512 SSDEEP TLSH
Score9/10-
Detects executables manipulated with Fody
-
Downloads MZ/PE file
-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Suspicious use of NtSetInformationThreadHideFromDebugger