2026-07-29_6626441f0ccd9e90974674d5e5c88e05_akira_amadey_elex_glassworm

General

Target
2026-07-29_6626441f0ccd9e90974674d5e5c88e05_akira_amadey_elex_glassworm
Size 12.2MB
Sample260729-c8kvsasgmc
SHA256 7538854c1087254ae57a05c8bd9ad8136ea352a988722fe0faa4be3578a45989
MD5 6626441f0ccd9e90974674d5e5c88e05
SHA1 19185888308d5053620ea818ab748e8e105e912c
SHA512 8c47ea8cd6687e4a61de6ffe92881f69685b8f86cce0daef1e0fddde435d7315c984ac21bd7c8fd3bae1585db8ecb4660ae8aaafe8d735b87b474a7d04583894
SSDEEP 393216:nM3uteshLvj1fYyLYyTGxBekc39BW/5Phx:Zt/hLvJGxQkcfGPn
TLSH
T130D63362F181E9B3CD9B4038D9FE5F2B53B5A82B071529FB438870A08E235E7E57851D
MD5 SHA1 SHA512 SSDEEP TLSH

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
2026-07-29_6626441f0ccd9e90974674d5e5c88e05_akira_amadey_elex_glassworm

File Explorer

2026-07-29_6626441f0ccd9e90974674d5e5c88e05_akira_amadey_elex_glassworm

.exe 12.2MB

2026-07-29_6626441f0ccd9e90974674d5e5c88e05_akira_amadey_elex_glassworm

IMPHASH 653a0ab8b8f5b6d8f1bc89c2c550303c
SHA256 7538854c1087254ae57a05c8bd9ad8136ea352a988722fe0faa4be3578a45989
MD5 6626441f0ccd9e90974674d5e5c88e05
SHA1 19185888308d5053620ea818ab748e8e105e912c
SHA512 8c47ea8cd6687e4a61de6ffe92881f69685b8f86cce0daef1e0fddde435d7315c984ac21bd7c8fd3bae1585db8ecb4660ae8aaafe8d735b87b474a7d04583894
SSDEEP 393216:nM3uteshLvj1fYyLYyTGxBekc39BW/5Phx:Zt/hLvJGxQkcfGPn
TLSH
T130D63362F181E9B3CD9B4038D9FE5F2B53B5A82B071529FB438870A08E235E7E57851D
MD5 SHA1 SHA512 SSDEEP TLSH

windows:6 windows x86 arch:x86

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

0

Major OS version

6

Entry point

95354

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths

stub.pdb

api-ms-win-core-synch-l1-2-0

WakeByAddressAll WaitOnAddress WakeByAddressSingle

kernel32

GetTickCount64 CreateToolhelp32Snapshot Process32First Process32Next CloseHandle GetCurrentProcess HeapSize VirtualAlloc GetPhysicallyInstalledSystemMemory GetProcAddress TlsAlloc TlsSetValue VirtualProtect FlushInstructionCache GetLastError LoadLibraryA LCMapStringW CompareStringW GetProcessHeap HeapFree WaitForSingleObject FreeEnvironmentStringsW SetLastError ReleaseMutex GetCurrentThreadId CreateFileW HeapReAlloc QueryPerformanceCounter GetStringTypeW SetStdHandle GetCPInfo GetOEMCP GetACP IsValidCodePage GetCommandLineA GetModuleHandleExW WriteFile RaiseException LoadLibraryExW FreeLibrary TlsFree TlsGetValue GetCurrentProcessId InitializeCriticalSectionAndSpinCount FlushFileBuffers IsDebuggerPresent GetCurrentThread RtlCaptureContext DeleteCriticalSection LeaveCriticalSection TerminateProcess GetEnvironmentStringsW EnterCriticalSection EncodePointer GetStdHandle SetFilePointerEx AddVectoredExceptionHandler SetThreadStackGuarantee GetCurrentDirectoryW GetEnvironmentVariableW GetCommandLineW lstrlenW WaitForSingleObjectEx CreateMutexA RtlUnwind FindFirstFileExW FindClose ExitProcess WideCharToMultiByte IsProcessorFeaturePresent SetEnvironmentVariableW HeapAlloc GetModuleFileNameW MultiByteToWideChar WriteConsoleW GetConsoleMode GetConsoleOutputCP GetFileType GetModuleHandleW GetStartupInfoW SetUnhandledExceptionFilter GetModuleHandleA UnhandledExceptionFilter FindNextFileW InitializeSListHead GetSystemTimeAsFileTime DecodePointer

ntdll

RtlNtStatusToDosError NtQueryInformationProcess NtWriteFile

Sharing

General

Malware Config

Signatures

File Explorer

2026-07-29_6626441f0ccd9e90974674d5e5c88e05_akira_amadey_elex_glassworm

api-ms-win-core-synch-l1-2-0

kernel32

ntdll

generic