2026-07-15_3f7d9ab4f79558382a0b867f927c80ce_akira_amadey_elex_glassworm

Sharing

Copy URL Twitter E-mail

General

Target
2026-07-15_3f7d9ab4f79558382a0b867f927c80ce_akira_amadey_elex_glassworm
Size 4.0MB
Sample260715-peatyaft5x
SHA256 2a3f73e5f4cc74c31e99d3a54e89bf2dde441408fd3dec4a27f75407dcb58477
MD5 3f7d9ab4f79558382a0b867f927c80ce
SHA1 8a61b3c83835d1de5acb64c8aa4fc1aa94fa194b
SHA512 2a64a1e052f05d756aae1d7554ae1d0218d1832cb8350bf473c1b4cc371eb2a72a2cd79da6d68d068b9dfe558d115f79853b40ae4be9d1d356cc6c947bb87aba
SSDEEP 49152:Sc7e0CGHIVnk3lAXW2N5n/koYVGia9SCIJ6ZNtHlr/KCo9w3xQ0uAWA0niplHXcP:Hy0lHokVAXW2N5MhUB538niDXA/6CIG
TLSH
T1A7166A46EA8710F9ED071574321EF33F9B365809832C9EE3CB945D25A96B7D2183BA0D
MD5 SHA1 SHA512 SSDEEP TLSH

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
2026-07-15_3f7d9ab4f79558382a0b867f927c80ce_akira_amadey_elex_glassworm

File Explorer

2026-07-15_3f7d9ab4f79558382a0b867f927c80ce_akira_amadey_elex_glassworm

.exe 4.0MB

2026-07-15_3f7d9ab4f79558382a0b867f927c80ce_akira_amadey_elex_glassworm

IMPHASH 24d21aec3ce1f38d958c2a8f26733a28
SHA256 2a3f73e5f4cc74c31e99d3a54e89bf2dde441408fd3dec4a27f75407dcb58477
MD5 3f7d9ab4f79558382a0b867f927c80ce
SHA1 8a61b3c83835d1de5acb64c8aa4fc1aa94fa194b
SHA512 2a64a1e052f05d756aae1d7554ae1d0218d1832cb8350bf473c1b4cc371eb2a72a2cd79da6d68d068b9dfe558d115f79853b40ae4be9d1d356cc6c947bb87aba
SSDEEP 49152:Sc7e0CGHIVnk3lAXW2N5n/koYVGia9SCIJ6ZNtHlr/KCo9w3xQ0uAWA0niplHXcP:Hy0lHokVAXW2N5MhUB538niDXA/6CIG
TLSH
T1A7166A46EA8710F9ED071574321EF33F9B365809832C9EE3CB945D25A96B7D2183BA0D
MD5 SHA1 SHA512 SSDEEP TLSH

windows:6 windows x86 arch:x86

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

Major OS version

Entry point

2759432

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_CUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LARGE_ADDRESS_AWARE IMAGE_FILE_32BIT_MACHINE

PDB paths

geckodriver.pdb

bcryptprimitives

ProcessPrng

api-ms-win-core-synch-l1-2-0

WaitOnAddress WakeByAddressAll WakeByAddressSingle

kernel32

AddVectoredExceptionHandler CancelIo CloseHandle CompareStringOrdinal CompareStringW CopyFileExW CreateDirectoryW CreateEventW CreateFileW CreateIoCompletionPort CreateMutexA CreateProcessW CreateThread CreateWaitableTimerExW DecodePointer DeleteCriticalSection DeleteFileW DuplicateHandle EncodePointer EnterCriticalSection ExitProcess FindClose FindFirstFileExW FindNextFileW FlsAlloc FlsFree FlsGetValue FlsSetValue FlushFileBuffers FormatMessageW FreeEnvironmentStringsW FreeLibrary GetACP GetCPInfo GetCommandLineA GetCommandLineW GetConsoleMode GetConsoleOutputCP GetCurrentDirectoryW GetCurrentProcess GetCurrentProcessId GetCurrentThread GetCurrentThreadId GetEnvironmentStringsW GetEnvironmentVariableW GetExitCodeProcess GetFileAttributesW GetFileInformationByHandle GetFileInformationByHandleEx GetFileType GetFinalPathNameByHandleW GetFullPathNameW GetLastError GetModuleFileNameW GetModuleHandleA GetModuleHandleExW GetModuleHandleW GetOEMCP GetOverlappedResult GetProcAddress GetProcessHeap GetProcessId GetQueuedCompletionStatusEx GetStartupInfoW GetStdHandle GetStringTypeW GetSystemDirectoryW GetSystemTimeAsFileTime GetSystemTimePreciseAsFileTime GetTempPathW GetTimeZoneInformationForYear GetWindowsDirectoryW HeapAlloc HeapFree HeapReAlloc HeapSize InitializeCriticalSectionEx InitializeSListHead IsDebuggerPresent IsProcessorFeaturePresent IsValidCodePage LCMapStringW LeaveCriticalSection LoadLibraryA LoadLibraryExW MoveFileExW MultiByteToWideChar PostQueuedCompletionStatus QueryPerformanceCounter QueryPerformanceFrequency RaiseException ReadFile ReadFileEx ReleaseMutex RemoveDirectoryW RtlCaptureContext RtlUnwind SetConsoleCtrlHandler SetEnvironmentVariableW SetFileCompletionNotificationModes SetFileInformationByHandle SetFilePointerEx SetHandleInformation SetLastError SetStdHandle SetThreadStackGuarantee SetUnhandledExceptionFilter SetWaitableTimer Sleep SleepEx SwitchToThread TerminateProcess UnhandledExceptionFilter VirtualProtect WaitForMultipleObjects WaitForSingleObject WaitForSingleObjectEx WideCharToMultiByte WriteConsoleW WriteFile WriteFileEx lstrlenW

ws2_32

WSACleanup WSAGetLastError WSAIoctl WSASend WSASocketW WSAStartup accept bind closesocket connect freeaddrinfo getaddrinfo getsockname getsockopt ioctlsocket listen recv send setsockopt shutdown

ntdll

NtCancelIoFileEx NtCreateFile NtCreateNamedPipeFile NtDeviceIoControlFile NtOpenFile NtReadFile NtWriteFile RtlNtStatusToDosError

advapi32

RegCloseKey RegEnumKeyExW RegOpenKeyExW RegQueryValueExW

Name

.text

Size

2.7MB

Virtual Size

2.7MB

Characteristics

IMAGE_SCN_CNT_CODE IMAGE_SCN_MEM_EXECUTE IMAGE_SCN_MEM_READ

Name

.rdata

Size

604KB

Virtual Size

604KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.data

Size

6KB

Virtual Size

8KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.fptable

Size

512B

Virtual Size

128B

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.tls

Size

512B

Virtual Size

285B

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.reloc

Size

644KB

Virtual Size

648KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_DISCARDABLE IMAGE_SCN_MEM_EXECUTE IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Sharing

General

Malware Config

Signatures

File Explorer

2026-07-15_3f7d9ab4f79558382a0b867f927c80ce_akira_amadey_elex_glassworm

bcryptprimitives

api-ms-win-core-synch-l1-2-0

kernel32

ws2_32

ntdll

advapi32

generic