2026-08-02_5e71a0105d2d8bc48cc5d37ba9fea0b8_akira_amadey_elex_glassworm

Sharing

Copy URL Twitter E-mail

General

Target
2026-08-02_5e71a0105d2d8bc48cc5d37ba9fea0b8_akira_amadey_elex_glassworm
Size 8.1MB
Sample260802-dmembacl3x
SHA256 a71ebc52aebd14da6926870dbde3ac58de45475de2de9f2d4cd31c414f0e0f18
MD5 5e71a0105d2d8bc48cc5d37ba9fea0b8
SHA1 7dc37c18b170528d8abef499cec714d112eb8534
SHA512 b7d253bb222fd4d63bf517b3e876d5f9d609fd570dbb180920f055b095e6ef798f561d584b3428674b2609234cf8dac3acbc3e9dd7a3874e9a932c4bac209676
SSDEEP 196608:IucRm94C0KOkK42TWM78PhxP/zQVyI7oHvr7Yp4Qexsw:IucRmGOfKNqM7sD/zQVyI7UIp4QUsw
TLSH
T1AA863362B741983AD58740319018E774953A4EB933095EC3C2F8BE94AD737D58B32BBE
MD5 SHA1 SHA512 SSDEEP TLSH

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
2026-08-02_5e71a0105d2d8bc48cc5d37ba9fea0b8_akira_amadey_elex_glassworm

File Explorer

2026-08-02_5e71a0105d2d8bc48cc5d37ba9fea0b8_akira_amadey_elex_glassworm

.exe 8.1MB

2026-08-02_5e71a0105d2d8bc48cc5d37ba9fea0b8_akira_amadey_elex_glassworm

IMPHASH ef300cf0986c2530b4213d5d5f6eb2eb
SHA256 a71ebc52aebd14da6926870dbde3ac58de45475de2de9f2d4cd31c414f0e0f18
MD5 5e71a0105d2d8bc48cc5d37ba9fea0b8
SHA1 7dc37c18b170528d8abef499cec714d112eb8534
SHA512 b7d253bb222fd4d63bf517b3e876d5f9d609fd570dbb180920f055b095e6ef798f561d584b3428674b2609234cf8dac3acbc3e9dd7a3874e9a932c4bac209676
SSDEEP 196608:IucRm94C0KOkK42TWM78PhxP/zQVyI7oHvr7Yp4Qexsw:IucRmGOfKNqM7sD/zQVyI7UIp4QUsw
TLSH
T1AA863362B741983AD58740319018E774953A4EB933095EC3C2F8BE94AD737D58B32BBE
MD5 SHA1 SHA512 SSDEEP TLSH

windows:6 windows x86 arch:x86

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

Major OS version

Entry point

248583

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LARGE_ADDRESS_AWARE IMAGE_FILE_32BIT_MACHINE

PDB paths

advapi32

SystemFunction036

kernel32

GetProcessHeap HeapAlloc HeapFree CloseHandle HeapReAlloc GetCommandLineW lstrlenW AcquireSRWLockExclusive GetFileInformationByHandleEx ReleaseSRWLockExclusive GetLastError GetCurrentProcess DuplicateHandle SwitchToThread SetFileInformationByHandle WaitForSingleObject CopyFileExW CompareStringOrdinal AddVectoredExceptionHandler SetThreadStackGuarantee AcquireSRWLockShared ReleaseSRWLockShared GetModuleHandleA GetProcAddress TlsGetValue TlsSetValue GetCurrentThread InitOnceBeginInitialize TlsAlloc InitOnceComplete TlsFree TryAcquireSRWLockExclusive GetStdHandle GetConsoleMode MultiByteToWideChar WriteConsoleW SetLastError WaitForSingleObjectEx LoadLibraryA GetCurrentProcessId CreateMutexA ReleaseMutex GetEnvironmentVariableW GetModuleHandleW FormatMessageW GetModuleFileNameW CreateFileW GetFileInformationByHandle GetFullPathNameW CreateDirectoryW FindFirstFileW FindClose GetEnvironmentStringsW FreeEnvironmentStringsW GetSystemDirectoryW GetWindowsDirectoryW CreateProcessW GetFileAttributesW CreateNamedPipeW CreateThread ReadFileEx SleepEx WriteFileEx WaitForMultipleObjects GetOverlappedResult GetExitCodeProcess CreateEventW CancelIo ReadFile GetCurrentDirectoryW RtlCaptureContext SetFilePointerEx GetConsoleOutputCP FlushFileBuffers HeapSize LCMapStringW CompareStringW QueryPerformanceCounter GetCurrentThreadId GetSystemTimeAsFileTime InitializeSListHead IsDebuggerPresent UnhandledExceptionFilter SetUnhandledExceptionFilter GetStartupInfoW IsProcessorFeaturePresent TerminateProcess RtlUnwind EncodePointer EnterCriticalSection LeaveCriticalSection DeleteCriticalSection InitializeCriticalSectionAndSpinCount FreeLibrary LoadLibraryExW RaiseException WriteFile ExitProcess GetModuleHandleExW GetCommandLineA FindFirstFileExW FindNextFileW IsValidCodePage GetACP GetOEMCP GetCPInfo WideCharToMultiByte SetEnvironmentVariableW SetStdHandle GetFileType GetStringTypeW DecodePointer

shell32

SHGetKnownFolderPath

ole32

CoTaskMemFree

ntdll

RtlNtStatusToDosError NtWriteFile NtCreateFile NtReadFile

bcrypt

BCryptGenRandom

Sharing

General

Malware Config

Signatures

File Explorer

2026-08-02_5e71a0105d2d8bc48cc5d37ba9fea0b8_akira_amadey_elex_glassworm

advapi32

kernel32

shell32

ole32

ntdll

bcrypt

generic