2026-07-07_f0ce19732e64f5a2f7af63309af1925f_amadey_elex_glassworm_smoke-loader

General

Target
2026-07-07_f0ce19732e64f5a2f7af63309af1925f_amadey_elex_glassworm_smoke-loader
Size 3.4MB
Sample260707-vzhyyaaw41
SHA256 0a75d1b8516d0ef2942f869ca6784058e0eb15429fa5ba814967105e11e98ebf
MD5 f0ce19732e64f5a2f7af63309af1925f
SHA1 d3a07bbbab0108fbe8fa178dceb1c64f6b1bdf5f
SHA512 81ab2f62a06bff439e7d9254428441d2f78ec9ca7bd0d43d925c8bc2fb66a8e2a7dd89a4c25a485a84a17ae4f80fb868ad8f532a4b98aa45ad8e9b50bc325553
SSDEEP 98304:Y/1P86K+JLPjopjBxcO4EYt/1P86K+JLgW1Pszt:Y/1O+VopjBxcO4d/1O+Dxs5
TLSH
T18FF55A12B3E54234E0B33A7089B9A2759A7ABC515B38C6CF4388956D5FB3EC09D35363
MD5 SHA1 SHA512 SSDEEP TLSH

Score

5^/10

upx

UPX packed file 1 IoCs

Detects executables packed with UPX/modified UPX open source packer.

resource	yara_rule
sample	upx

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
2026-07-07_f0ce19732e64f5a2f7af63309af1925f_amadey_elex_glassworm_smoke-loader

2026-07-07_f0ce19732e64f5a2f7af63309af1925f_amadey_elex_glassworm_smoke-loader

.exe 3.4MB

SHA256 0a75d1b8516d0ef2942f869ca6784058e0eb15429fa5ba814967105e11e98ebf
MD5 f0ce19732e64f5a2f7af63309af1925f
SHA1 d3a07bbbab0108fbe8fa178dceb1c64f6b1bdf5f
SHA512 81ab2f62a06bff439e7d9254428441d2f78ec9ca7bd0d43d925c8bc2fb66a8e2a7dd89a4c25a485a84a17ae4f80fb868ad8f532a4b98aa45ad8e9b50bc325553
SSDEEP 98304:Y/1P86K+JLPjopjBxcO4EYt/1P86K+JLgW1Pszt:Y/1O+VopjBxcO4d/1O+Dxs5
TLSH
T18FF55A12B3E54234E0B33A7089B9A2759A7ABC515B38C6CF4388956D5FB3EC09D35363
MD5 SHA1 SHA512 SSDEEP TLSH

UPX packed file

Detects executables packed with UPX/modified UPX open source packer.

upx
Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

0

Major OS version

4

Entry point

317776

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LINE_NUMS_STRIPPED IMAGE_FILE_LOCAL_SYMS_STRIPPED IMAGE_FILE_DEBUG_STRIPPED

PDB paths