General
- Target 2026-07-23_facbce6e1ba924d43aae477d9eb4f407_amadey_elex_glassworm_poet-rat_smoke-loader_stop
- Size 13.6MB
- Sample260723-3pms5sdj5v
- SHA256 9cf88efb860569cf1fc692a63e2f1c224b12bea0bad86e1cb47c9f47156d052f
- MD5 facbce6e1ba924d43aae477d9eb4f407
- SHA1 7f047f32b1c8e5c3b4dd6c3ba9ddf5e035e39ab3
- SHA512 03b88e1a83613eaa9cac462e7afd61b10022becc04c150f7c0ed0d0d6cd08ff082f788c71e280acd15c658770f2901cf6fade31092ec19f13242a8e5855b333b
- SSDEEP 393216:AVTJra2BnSzXER8IgpTUrzz+SopcvoOQbVl4effnn:ENBncS8thgzj5voxbVKeffn
- TLSH T184E61211EE81C93FD743E17D5809D5D7BA3A51AA62C987330BE00E96CA24D4C9A17FCE
- MD5 SHA1 SHA512 SSDEEP TLSH
Behavioral task
behavioral1
Sample
2026-07-23_facbce6e1ba924d43aae477d9eb4f407_amadey_elex_glassworm_poet-rat_smoke-loader_stop.exe
Resource
win10v2004-20260513-en
7 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-07-23_facbce6e1ba924d43aae477d9eb4f407_amadey_elex_glassworm_poet-rat_smoke-loader_stop.exe
Resource
win11ltsc2024-20260709-en
6 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-07-23_facbce6e1ba924d43aae477d9eb4f407_amadey_elex_glassworm_poet-rat_smoke-loader_stop
- Size 13.6MB
- SHA256 9cf88efb860569cf1fc692a63e2f1c224b12bea0bad86e1cb47c9f47156d052f
- MD5 facbce6e1ba924d43aae477d9eb4f407
- SHA1 7f047f32b1c8e5c3b4dd6c3ba9ddf5e035e39ab3
- SHA512 03b88e1a83613eaa9cac462e7afd61b10022becc04c150f7c0ed0d0d6cd08ff082f788c71e280acd15c658770f2901cf6fade31092ec19f13242a8e5855b333b
- SSDEEP 393216:AVTJra2BnSzXER8IgpTUrzz+SopcvoOQbVl4effnn:ENBncS8thgzj5voxbVKeffn
- TLSH T184E61211EE81C93FD743E17D5809D5D7BA3A51AA62C987330BE00E96CA24D4C9A17FCE
- MD5 SHA1 SHA512 SSDEEP TLSH
Score5/10-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.