General
- Target 2026-07-01_9f061321ca5b9c8d22b016119ed5e4b1_amadey_elex_glassworm_smoke-loader
- Size 894KB
- Sample260701-ntc26sez4s
- SHA256 c9d35380465ab4d3601c2d28a60ff294b41dd78d8662a4404aa0d88204804025
- MD5 9f061321ca5b9c8d22b016119ed5e4b1
- SHA1 c40cb2dfab60836374f6fce149a802cc2e90fc4f
- SHA512 7156c5978b8b71cc210054abda75f9e982fc0e75d43a346f147e0245a21ef10639ec7bda1fe60dd22d4651ccd7ca6e32997ca8ca1fd71b18256cb00786ef86a5
- SSDEEP 24576:2bi/QhDC8mY93kyw8hC2A5CxLbRpWrzzZyP4UMd6+Q:R/QMnl5YL7WzZyQRd+
- TLSH T1BC157D52B3C3C1B2EFA215F3D9B557360939BC78133889C7B7D8282DC9A26C06A75359
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
8/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-07-01_9f061321ca5b9c8d22b016119ed5e4b1_amadey_elex_glassworm_smoke-loader.exe
Resource
win10v2004-20260513-en
3 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-07-01_9f061321ca5b9c8d22b016119ed5e4b1_amadey_elex_glassworm_smoke-loader.exe
Resource
win11ltsc2024-20260629-en
15 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-07-01_9f061321ca5b9c8d22b016119ed5e4b1_amadey_elex_glassworm_smoke-loader
- Size 894KB
- SHA256 c9d35380465ab4d3601c2d28a60ff294b41dd78d8662a4404aa0d88204804025
- MD5 9f061321ca5b9c8d22b016119ed5e4b1
- SHA1 c40cb2dfab60836374f6fce149a802cc2e90fc4f
- SHA512 7156c5978b8b71cc210054abda75f9e982fc0e75d43a346f147e0245a21ef10639ec7bda1fe60dd22d4651ccd7ca6e32997ca8ca1fd71b18256cb00786ef86a5
- SSDEEP 24576:2bi/QhDC8mY93kyw8hC2A5CxLbRpWrzzZyP4UMd6+Q:R/QMnl5YL7WzZyQRd+
- TLSH T1BC157D52B3C3C1B2EFA215F3D9B557360939BC78133889C7B7D8282DC9A26C06A75359
- MD5 SHA1 SHA512 SSDEEP TLSH
Score8/10Boot or Logon Autostart Execution: Active Setup
Adversaries may achieve persistence by adding a Registry key to the Active Setup of the local machine.
Enumerates connected drives
Attempts to read the root path of hard drives other than the default C: drive.