General
- Target 2026-07-06_be12018b32d82e424c59757a783e7f7f_amadey_elex_glassworm_smoke-loader
- Size 4.0MB
- Sample260707-bllm5ae15t
- SHA256 a459d024d6eeec0d8cacf486e00b7cef64362014215618d20385ec1f4a3f333c
- MD5 be12018b32d82e424c59757a783e7f7f
- SHA1 ba09ee52d1cfe81b663d1d2f3855a092b6c94384
- SHA512 8df3afd8500333635f31a557fefda144c67ffe2107e10cc2299a9ad696f3b77a6ed53274a1b490350821011ab93ed2489dba790bad33c06f675395461e371d6d
- SSDEEP 98304:3mJZWgry+DBZwI23uahobUQ2Q1MVLUjH5oxFbx:38rnp4uahaF1MVUjZEd
- TLSH T19616CD53E7818AD8E64D0476EF544241972AF629A7EF6321389C120DCE4778BBF25E3C
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
9/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-07-06_be12018b32d82e424c59757a783e7f7f_amadey_elex_glassworm_smoke-loader.exe
Resource
win10v2004-20260513-en
8 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-07-06_be12018b32d82e424c59757a783e7f7f_amadey_elex_glassworm_smoke-loader.exe
Resource
win11ltsc2024-20260706-en
7 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-07-06_be12018b32d82e424c59757a783e7f7f_amadey_elex_glassworm_smoke-loader
- Size 4.0MB
- SHA256 a459d024d6eeec0d8cacf486e00b7cef64362014215618d20385ec1f4a3f333c
- MD5 be12018b32d82e424c59757a783e7f7f
- SHA1 ba09ee52d1cfe81b663d1d2f3855a092b6c94384
- SHA512 8df3afd8500333635f31a557fefda144c67ffe2107e10cc2299a9ad696f3b77a6ed53274a1b490350821011ab93ed2489dba790bad33c06f675395461e371d6d
- SSDEEP 98304:3mJZWgry+DBZwI23uahobUQ2Q1MVLUjH5oxFbx:38rnp4uahaF1MVUjZEd
- TLSH T19616CD53E7818AD8E64D0476EF544241972AF629A7EF6321389C120DCE4778BBF25E3C
- MD5 SHA1 SHA512 SSDEEP TLSH
Score9/10-
UPX dump on OEP (original entry point)
-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Executes dropped EXE