General
- Target 2026-07-10_7ccbdd4ef4274da2a0fc753428f81a43_akira_amadey_elex_glassworm
- Size 100.0MB
- Sample260710-2eav6acy7p
- SHA256 819b5a3fec0b64144741025acab97cfce3d5b1ffda41a552c32ad133a2449503
- MD5 7ccbdd4ef4274da2a0fc753428f81a43
- SHA1 c648c782872a8d233659081a870149bb7543da5c
- SHA512 3c4e7cb63e455210fbbd2f55f6a4e5a2520f9d03d63f00adde242f17c5e5cb573090825dfd9c760301e341a59a936ca8467832c29711bc38f24f614282fd926f
- SSDEEP 1572864:qdjneyb6e1VsY7Trb/B875LwGC6kQcLhYLbjKCv/Xq:qhkCDTIhwGLsLu+aS
- TLSH T17538F12ABED578725BFED3939BD3CCBD8517500012633C9F298A17D88409BA8AF7215D
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
9/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-07-10_7ccbdd4ef4274da2a0fc753428f81a43_akira_amadey_elex_glassworm.exe
Resource
win10v2004-20260513-en
15 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-07-10_7ccbdd4ef4274da2a0fc753428f81a43_akira_amadey_elex_glassworm.exe
Resource
win11ltsc2024-20260710-en
14 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-07-10_7ccbdd4ef4274da2a0fc753428f81a43_akira_amadey_elex_glassworm
- Size 100.0MB
- SHA256 819b5a3fec0b64144741025acab97cfce3d5b1ffda41a552c32ad133a2449503
- MD5 7ccbdd4ef4274da2a0fc753428f81a43
- SHA1 c648c782872a8d233659081a870149bb7543da5c
- SHA512 3c4e7cb63e455210fbbd2f55f6a4e5a2520f9d03d63f00adde242f17c5e5cb573090825dfd9c760301e341a59a936ca8467832c29711bc38f24f614282fd926f
- SSDEEP 1572864:qdjneyb6e1VsY7Trb/B875LwGC6kQcLhYLbjKCv/Xq:qhkCDTIhwGLsLu+aS
- TLSH T17538F12ABED578725BFED3939BD3CCBD8517500012633C9F298A17D88409BA8AF7215D
- MD5 SHA1 SHA512 SSDEEP TLSH
Score9/10-
Detect binaries embedding considerable number of MFA browser extension IDs.
-
Detect binaries embedding considerable number of cryptocurrency wallet browser extension IDs.
-
Detects binaries (Windows and macOS) referencing many web browsers. Observed in information stealers
-
Detects executables containing bas64 encoded gzip files
-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Executes dropped EXE