General
- Target 2026-07-31_298b9abe1eebe807ba06b792c4e303e2_amadey_elex_glassworm_poet-rat_smoke-loader_stop
- Size 13.6MB
- Sample260801-aec7qsttfw
- SHA256 b6d88af8cb9eab62e0694da97277ff6f58b9badf1c82a89de6b2139f04d1429c
- MD5 298b9abe1eebe807ba06b792c4e303e2
- SHA1 6ac6781d6723f5ebcf00fea6e0ab6045f2f71711
- SHA512 ab2f1995683147145df7f226cac3a24bda4eaa448c9723f4b1b607425b09cf613d5141fad460807b1459df746a260a8c8af943a9a239df42e13ac77268c2e1ea
- SSDEEP 393216:AVTJra2BnSzXER8IgpTUrzz+SopcvoOQbVl4effnM:ENBncS8thgzj5voxbVKeffM
- TLSH T165E61211EE81C93FD743E17D5809D5D7BA3A51AA62C987330BE00E96CA24D4C9A17FCE
- MD5 SHA1 SHA512 SSDEEP TLSH
Behavioral task
behavioral1
Sample
2026-07-31_298b9abe1eebe807ba06b792c4e303e2_amadey_elex_glassworm_poet-rat_smoke-loader_stop.exe
Resource
win10v2004-20260513-en
7 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-07-31_298b9abe1eebe807ba06b792c4e303e2_amadey_elex_glassworm_poet-rat_smoke-loader_stop.exe
Resource
win11ltsc2024-20260709-en
6 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-07-31_298b9abe1eebe807ba06b792c4e303e2_amadey_elex_glassworm_poet-rat_smoke-loader_stop
- Size 13.6MB
- SHA256 b6d88af8cb9eab62e0694da97277ff6f58b9badf1c82a89de6b2139f04d1429c
- MD5 298b9abe1eebe807ba06b792c4e303e2
- SHA1 6ac6781d6723f5ebcf00fea6e0ab6045f2f71711
- SHA512 ab2f1995683147145df7f226cac3a24bda4eaa448c9723f4b1b607425b09cf613d5141fad460807b1459df746a260a8c8af943a9a239df42e13ac77268c2e1ea
- SSDEEP 393216:AVTJra2BnSzXER8IgpTUrzz+SopcvoOQbVl4effnM:ENBncS8thgzj5voxbVKeffM
- TLSH T165E61211EE81C93FD743E17D5809D5D7BA3A51AA62C987330BE00E96CA24D4C9A17FCE
- MD5 SHA1 SHA512 SSDEEP TLSH
Score5/10-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.