2026-07-10_1fef3532970410030f1c0fd138cc051a_akira_amadey_blankgrabber_elex_glassworm

General

Target
2026-07-10_1fef3532970410030f1c0fd138cc051a_akira_amadey_blankgrabber_elex_glassworm
Size 81.5MB
Sample260710-2w2efagw3s
SHA256 1662db0f08b6ab3da6496493bbda081b873bcad405374bf94e47689e73121ff5
MD5 1fef3532970410030f1c0fd138cc051a
SHA1 2847eb74b1fb37d9a449b0cc8a6003b77d082898
SHA512 08108fb786a2a61aae337b60b3de403594ff5631537a0a0186e6c0a0b718790bf2197f1997b1d53c6cb195870013b42a25faaafa97ac1caf401f273fd0be0786
SSDEEP 1572864:rAwJk1ISuBSnShjzBPW/n15DmWP4jQQHgOF+Z6+3N0Cv81+KcB5dZ4OeWTXU+mU8:rLk1ISbnShfBWn3qI4MEgOF+I25v8IK5
TLSH
T16C183362BE42D0FFD4CA0275D83EB77DBA3751A6C76A84C346DD0C5868E22A0191739F
MD5 SHA1 SHA512 SSDEEP TLSH

Score

1^/10

Malware Config

Signatures

File Explorer

2026-07-10_1fef3532970410030f1c0fd138cc051a_akira_amadey_blankgrabber_elex_glassworm

.exe 81.5MB

2026-07-10_1fef3532970410030f1c0fd138cc051a_akira_amadey_blankgrabber_elex_glassworm

IMPHASH 03318be952fa320df74111ccedfc7685
SHA256 1662db0f08b6ab3da6496493bbda081b873bcad405374bf94e47689e73121ff5
MD5 1fef3532970410030f1c0fd138cc051a
SHA1 2847eb74b1fb37d9a449b0cc8a6003b77d082898
SHA512 08108fb786a2a61aae337b60b3de403594ff5631537a0a0186e6c0a0b718790bf2197f1997b1d53c6cb195870013b42a25faaafa97ac1caf401f273fd0be0786
SSDEEP 1572864:rAwJk1ISuBSnShjzBPW/n15DmWP4jQQHgOF+Z6+3N0Cv81+KcB5dZ4OeWTXU+mU8:rLk1ISbnShfBWn3qI4MEgOF+I25v8IK5
TLSH
T16C183362BE42D0FFD4CA0275D83EB77DBA3751A6C76A84C346DD0C5868E22A0191739F
MD5 SHA1 SHA512 SSDEEP TLSH

windows:6 windows x86 arch:x86

Digest

30:76:50:e9:4c:03:bf:00:28:22:e1:5c:79:bd:53:ef:f5:ff:db:f0:60:2c:95:2a:c8:97:cf:9b:e0:12:a9:71

Digest Algorithm

sha256

PE Digests Matches

Trusted

Signing Certificate

CN=Virage Studio,O=Virage Studio,L=Orford,ST=Quebec,C=CA

Chains

Jul 8, 2026

CN=Virage Studio,O=Virage Studio,L=Orford,ST=Quebec,C=CA

CN=SSL.com Code Signing Intermediate CA RSA R1,O=SSL Corp,L=Houston,ST=Texas,C=US

CN=SSL.com Root Certification Authority RSA,O=SSL Corporation,L=Houston,ST=Texas,C=US

Subject

CN=SSL.com Code Signing Intermediate CA RSA R1,O=SSL Corp,L=Houston,ST=Texas,C=US

Serial Number

64:33:51:d3:c7:38:9f:08

Issuer

CN=SSL.com Root Certification Authority RSA,O=SSL Corporation,L=Houston,ST=Texas,C=US

Key Usages

KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign

Ext Key Usages

ExtKeyUsageCodeSigning

Revocation Status

Not revoked

Timespan

Jun 24, 2016 - Jun 24, 2031

Subject

CN=Virage Studio,O=Virage Studio,L=Orford,ST=Quebec,C=CA

Serial Number

7d:80:9b:15:18:55:9d:21:09:7f:59:20:3b:cf:50:64

Issuer

CN=SSL.com Code Signing Intermediate CA RSA R1,O=SSL Corp,L=Houston,ST=Texas,C=US

Key Usages

KeyUsageDigitalSignature

Ext Key Usages

ExtKeyUsageCodeSigning

Revocation Status

Not revoked

Timespan

Jul 8, 2026 - Jul 8, 2027

Subject

CN=SSL.com Timestamping Unit 2025 E1,O=SSL Corp,L=Houston,ST=Texas,C=US

Serial Number

1f:6b:16:62:d2:2e:1b:6c:5d:f1:c0:c1:a0:60:0e:38

Issuer

CN=SSL.com Timestamping Issuing RSA CA R1,O=SSL Corp,L=Houston,ST=Texas,C=US

Key Usages

KeyUsageDigitalSignature

Ext Key Usages

ExtKeyUsageTimeStamping

Revocation Status

Not revoked

Timespan

Feb 18, 2025 - Nov 12, 2034

Subject

CN=SSL.com Timestamping Issuing RSA CA R1,O=SSL Corp,L=Houston,ST=Texas,C=US

Serial Number

6d:52:18:70:87:e8:23:4d:85:60:00:d0:80:8f:93:56

Issuer

CN=SSL.com Root Certification Authority RSA,O=SSL Corporation,L=Houston,ST=Texas,C=US

Key Usages

KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign

Ext Key Usages

ExtKeyUsageTimeStamping

Revocation Status

Not revoked

Timespan

Nov 13, 2019 - Nov 12, 2034

Minor OS version

0

Major OS version

6

Entry point

2283250

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LARGE_ADDRESS_AWARE IMAGE_FILE_32BIT_MACHINE

PDB paths

setup.pdb

kernel32

GetModuleFileNameW SetThreadErrorMode LoadLibraryExW SetUnhandledExceptionFilter SystemTimeToFileTime SystemTimeToTzSpecificLocalTime GetTimeZoneInformationForYear CloseHandle GetCommandLineW SetLastError SetCurrentDirectoryW GetNativeSystemInfo GetCurrentProcess UnhandledExceptionFilter GetSystemInfo DuplicateHandle TlsSetValue VirtualQuery GetFileInformationByHandleEx SetFileInformationByHandle FindClose TlsGetValue GetFullPathNameW GetModuleHandleA WakeAllConditionVariable WakeConditionVariable SwitchToThread SleepConditionVariableSRW AcquireSRWLockExclusive ReleaseSRWLockExclusive GetFileInformationByHandle InitOnceBeginInitialize TlsAlloc InitOnceComplete TlsFree MultiByteToWideChar WaitForSingleObject GetCurrentThread ReleaseMutex GetCurrentDirectoryW WaitForSingleObjectEx LoadLibraryA lstrlenW GetCurrentProcessId CreateMutexA WideCharToMultiByte GetCurrentThreadId GetEnvironmentVariableW CreateThread SetThreadStackGuarantee ReadFileEx SleepEx WriteFileEx CompareStringOrdinal GetModuleHandleW CreateFileW SetFileTime FindFirstFileExW TryAcquireSRWLockExclusive GetProcAddress GetSystemTimeAsFileTime CreateDirectoryW ExitProcess GetExitCodeProcess GetEnvironmentStringsW FreeEnvironmentStringsW GetSystemDirectoryW GetWindowsDirectoryW CreateProcessW GetFileAttributesW GetTempPathW RemoveDirectoryW CopyFileExW MoveFileExW CreateSymbolicLinkW CreateWaitableTimerExW SetWaitableTimer Sleep FindNextFileW ExpandEnvironmentStringsW GetLongPathNameW GetConsoleOutputCP SetStdHandle DecodePointer RtlUnwind IsDebuggerPresent RaiseException EncodePointer SetFilePointerEx FlushFileBuffers LCMapStringW CompareStringW InitializeCriticalSectionEx HeapSize FlsFree FlsSetValue FlsGetValue FlsAlloc TerminateProcess OpenProcess QueryFullProcessImageNameW IsWow64Process GetLastError VerSetConditionMask VerifyVersionInfoW GetDiskFreeSpaceExW GetUserPreferredUILanguages LoadLibraryExA GetStringTypeW GetFileType SetHandleInformation SetEnvironmentVariableW GetCPInfo FreeLibrary GetProcessHeap HeapFree HeapAlloc FormatMessageW GetConsoleMode GetStdHandle WriteConsoleW SetConsoleMode SetConsoleTextAttribute GetConsoleScreenBufferInfo OutputDebugStringA OutputDebugStringW CreateFileMappingW MapViewOfFile VirtualProtect UnmapViewOfFile AddVectoredExceptionHandler HeapReAlloc GetOEMCP GetACP IsValidCodePage RtlCaptureContext GetCommandLineA QueryPerformanceFrequency QueryPerformanceCounter WriteFile InitializeCriticalSectionAndSpinCount GetModuleHandleExW InitializeSListHead GetStartupInfoW IsProcessorFeaturePresent EnterCriticalSection LeaveCriticalSection DeleteCriticalSection

user32

SendMessageW AllowSetForegroundWindow ReleaseDC PostMessageW DefWindowProcW EndPaint UpdateLayeredWindow BeginPaint InvalidateRect GetWindowLongW EndDialog TranslateMessage GetMessageW DispatchMessageW PeekMessageW SetTimer ShowWindow SetWindowLongW GetDC GetDesktopWindow CreateWindowExW RegisterClassExW SystemParametersInfoW LoadCursorW GetMonitorInfoW GetDpiForSystem MonitorFromPoint GetCursorPos DestroyWindow GetSystemMetrics SetWindowPos

ntdll

NtReadFile NtWriteFile NtCreateFile RtlInitUnicodeString RtlNtStatusToDosError NtOpenFile NtCreateNamedPipeFile

combase

CoTaskMemFree CoTaskMemAlloc

Name

.text

Size

2.3MB

Virtual Size

2.3MB

Characteristics

IMAGE_SCN_CNT_CODE IMAGE_SCN_MEM_EXECUTE IMAGE_SCN_MEM_READ

Name

.rdata

Size

1.9MB

Virtual Size

1.9MB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.data

Size

3KB

Virtual Size

6KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.fptable

Size

512B

Virtual Size

128B

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.rsrc

Size

3KB

Virtual Size

2KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.reloc

Size

96KB

Virtual Size

95KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_DISCARDABLE IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

File Explorer

2026-07-10_1fef3532970410030f1c0fd138cc051a_akira_amadey_blankgrabber_elex_glassworm

kernel32

user32

ntdll

combase

generic