2026-07-31_a5a2c7c6764de014e7915ce3493d9de7_amadey_elex_glassworm_smoke-loader

General

Target
2026-07-31_a5a2c7c6764de014e7915ce3493d9de7_amadey_elex_glassworm_smoke-loader
Size 1.9MB
Sample260731-vr8jmaythy
SHA256 35a4b1b952f7bcbc0b51b58a664a278c1c642766d266915275db6a111a69ce77
MD5 a5a2c7c6764de014e7915ce3493d9de7
SHA1 dea02bd9a2d00fe123bbb339256a6f79cbaffc4a
SHA512 43fc0a5d1dfcb45188ad94454a419820168fbabd4966dfb1c22fdf18690159e862d45afc1cde6f4540d5fb1fcccba38e27cb5c42565447d45e405a56d18c19e3
SSDEEP 49152:jj9LxcO4Q5YtNPFxd1qkqe8ZbnU41qkqnCg2887eIqZBsEZ9:jjBxcO4EYt111qfr1qfp2Ugs
TLSH
T148958C1277D24075E8F322B0552EB7399678FA100B2293CF87449DA9AF71BC25E39397
MD5 SHA1 SHA512 SSDEEP TLSH

Score

5^/10

upx

UPX packed file 1 IoCs

Detects executables packed with UPX/modified UPX open source packer.

resource	yara_rule
sample	upx

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
2026-07-31_a5a2c7c6764de014e7915ce3493d9de7_amadey_elex_glassworm_smoke-loader

2026-07-31_a5a2c7c6764de014e7915ce3493d9de7_amadey_elex_glassworm_smoke-loader

.exe 1.9MB

SHA256 35a4b1b952f7bcbc0b51b58a664a278c1c642766d266915275db6a111a69ce77
MD5 a5a2c7c6764de014e7915ce3493d9de7
SHA1 dea02bd9a2d00fe123bbb339256a6f79cbaffc4a
SHA512 43fc0a5d1dfcb45188ad94454a419820168fbabd4966dfb1c22fdf18690159e862d45afc1cde6f4540d5fb1fcccba38e27cb5c42565447d45e405a56d18c19e3
SSDEEP 49152:jj9LxcO4Q5YtNPFxd1qkqe8ZbnU41qkqnCg2887eIqZBsEZ9:jjBxcO4EYt111qfr1qfp2Ugs
TLSH
T148958C1277D24075E8F322B0552EB7399678FA100B2293CF87449DA9AF71BC25E39397
MD5 SHA1 SHA512 SSDEEP TLSH

UPX packed file

Detects executables packed with UPX/modified UPX open source packer.

upx
Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

0

Major OS version

4

Entry point

4640

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LINE_NUMS_STRIPPED IMAGE_FILE_LOCAL_SYMS_STRIPPED IMAGE_FILE_DEBUG_STRIPPED

PDB paths