2026-07-27_5b7008087f2d5e5c8c4bdb7691d03dc6_akira_amadey_blankgrabber_elex_floxif_glassworm

General

Target
2026-07-27_5b7008087f2d5e5c8c4bdb7691d03dc6_akira_amadey_blankgrabber_elex_floxif_glassworm
Size 11.1MB
Sample260727-vl64lsam2x
SHA256 0e1a8208daef585028fbcb29b49e5190cea9a993153bfb2e314701ec55d42f8e
MD5 5b7008087f2d5e5c8c4bdb7691d03dc6
SHA1 4b9160ba54093ce49aae8a6e218798b989800acb
SHA512 54c457ac334cdf58129d4bfa4398d16ebeae41de0692312996d8508eab050d403cb08a5f2e9b27c4b4164bbccc55e1eb6ed826af3c5c8ae5d42b2d551cf19296
SSDEEP 196608:bgMyY5DTgGnG6XAGw0040yF5NFdjPnN4Sw6qHn3ILn03t+6E4U7Btjuw:vJ5ngOwh60ojFdjfN4SwVI70bUTjuw
TLSH
T1BEC60162FF02D0FBD48A01B5E43EB73DB6369E95872A85C34A99385CA8F5270584335F
MD5 SHA1 SHA512 SSDEEP TLSH

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
2026-07-27_5b7008087f2d5e5c8c4bdb7691d03dc6_akira_amadey_blankgrabber_elex_floxif_glassworm

File Explorer

2026-07-27_5b7008087f2d5e5c8c4bdb7691d03dc6_akira_amadey_blankgrabber_elex_floxif_glassworm

.exe 11.1MB

2026-07-27_5b7008087f2d5e5c8c4bdb7691d03dc6_akira_amadey_blankgrabber_elex_floxif_glassworm

IMPHASH 23d06bfb8fc76f50f00322b92edcd220
SHA256 0e1a8208daef585028fbcb29b49e5190cea9a993153bfb2e314701ec55d42f8e
MD5 5b7008087f2d5e5c8c4bdb7691d03dc6
SHA1 4b9160ba54093ce49aae8a6e218798b989800acb
SHA512 54c457ac334cdf58129d4bfa4398d16ebeae41de0692312996d8508eab050d403cb08a5f2e9b27c4b4164bbccc55e1eb6ed826af3c5c8ae5d42b2d551cf19296
SSDEEP 196608:bgMyY5DTgGnG6XAGw0040yF5NFdjPnN4Sw6qHn3ILn03t+6E4U7Btjuw:vJ5ngOwh60ojFdjfN4SwVI70bUTjuw
TLSH
T1BEC60162FF02D0FBD48A01B5E43EB73DB6369E95872A85C34A99385CA8F5270584335F
MD5 SHA1 SHA512 SSDEEP TLSH

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

0

Major OS version

6

Entry point

2282930

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LARGE_ADDRESS_AWARE IMAGE_FILE_32BIT_MACHINE

PDB paths

setup.pdb

kernel32

GetModuleFileNameW SetThreadErrorMode LoadLibraryExW SetUnhandledExceptionFilter SystemTimeToFileTime SystemTimeToTzSpecificLocalTime GetTimeZoneInformationForYear CloseHandle GetCommandLineW SetLastError SetCurrentDirectoryW GetNativeSystemInfo GetCurrentProcess UnhandledExceptionFilter GetSystemInfo DuplicateHandle TlsSetValue VirtualQuery GetFileInformationByHandleEx SetFileInformationByHandle FindClose GetFullPathNameW GetModuleHandleA WakeAllConditionVariable WakeConditionVariable ReleaseSRWLockExclusive SwitchToThread SleepConditionVariableSRW TlsGetValue AcquireSRWLockExclusive GetFileInformationByHandle InitOnceBeginInitialize TlsAlloc InitOnceComplete TlsFree MultiByteToWideChar WaitForSingleObject GetCurrentThread ReleaseMutex GetCurrentDirectoryW WaitForSingleObjectEx LoadLibraryA lstrlenW GetCurrentProcessId CreateMutexA WideCharToMultiByte GetCurrentThreadId GetEnvironmentVariableW CreateThread SetThreadStackGuarantee ReadFileEx SleepEx WriteFileEx CompareStringOrdinal GetModuleHandleW CreateFileW SetFileTime FindFirstFileExW TryAcquireSRWLockExclusive GetProcAddress GetSystemTimeAsFileTime CreateDirectoryW ExitProcess GetExitCodeProcess GetEnvironmentStringsW FreeEnvironmentStringsW GetSystemDirectoryW GetWindowsDirectoryW CreateProcessW GetFileAttributesW GetTempPathW RemoveDirectoryW CopyFileExW MoveFileExW CreateSymbolicLinkW CreateWaitableTimerExW SetWaitableTimer Sleep FindNextFileW ExpandEnvironmentStringsW GetLongPathNameW GetConsoleOutputCP SetStdHandle DecodePointer RtlUnwind IsDebuggerPresent RaiseException EncodePointer SetFilePointerEx FlushFileBuffers LCMapStringW CompareStringW InitializeCriticalSectionEx HeapSize FlsFree FlsSetValue FlsGetValue FlsAlloc TerminateProcess OpenProcess QueryFullProcessImageNameW IsWow64Process GetLastError VerSetConditionMask VerifyVersionInfoW GetDiskFreeSpaceExW GetUserPreferredUILanguages LoadLibraryExA GetStringTypeW GetFileType SetHandleInformation SetEnvironmentVariableW GetCPInfo FreeLibrary GetProcessHeap HeapFree HeapAlloc FormatMessageW GetConsoleMode GetStdHandle WriteConsoleW SetConsoleMode SetConsoleTextAttribute GetConsoleScreenBufferInfo OutputDebugStringA OutputDebugStringW CreateFileMappingW MapViewOfFile VirtualProtect UnmapViewOfFile AddVectoredExceptionHandler HeapReAlloc GetOEMCP GetACP IsValidCodePage RtlCaptureContext GetCommandLineA QueryPerformanceFrequency QueryPerformanceCounter WriteFile InitializeCriticalSectionAndSpinCount GetModuleHandleExW InitializeSListHead GetStartupInfoW IsProcessorFeaturePresent EnterCriticalSection LeaveCriticalSection DeleteCriticalSection

user32

SendMessageW AllowSetForegroundWindow ReleaseDC PostMessageW DefWindowProcW EndPaint UpdateLayeredWindow BeginPaint InvalidateRect GetWindowLongW EndDialog TranslateMessage GetMessageW DispatchMessageW PeekMessageW SetTimer ShowWindow SetWindowLongW GetDC GetDesktopWindow CreateWindowExW RegisterClassExW SystemParametersInfoW LoadCursorW GetMonitorInfoW GetDpiForSystem MonitorFromPoint GetCursorPos DestroyWindow GetSystemMetrics SetWindowPos

ntdll

NtReadFile NtWriteFile NtCreateFile RtlInitUnicodeString RtlNtStatusToDosError NtOpenFile NtCreateNamedPipeFile

combase

CoTaskMemFree CoTaskMemAlloc

Name

.text

Size

2.3MB

Virtual Size

2.3MB

Characteristics

IMAGE_SCN_CNT_CODE IMAGE_SCN_MEM_EXECUTE IMAGE_SCN_MEM_READ

Name

.rdata

Size

1.9MB

Virtual Size

1.9MB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.data

Size

3KB

Virtual Size

6KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.fptable

Size

512B

Virtual Size

128B

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.rsrc

Size

109KB

Virtual Size

109KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.reloc

Size

96KB

Virtual Size

95KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_DISCARDABLE IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

File Explorer

2026-07-27_5b7008087f2d5e5c8c4bdb7691d03dc6_akira_amadey_blankgrabber_elex_floxif_glassworm

kernel32

user32

ntdll

combase

generic