2026-08-03_548083e19f94ba95b92e71161eb48107_amadey_elex_glassworm_smoke-loader

General

Target
2026-08-03_548083e19f94ba95b92e71161eb48107_amadey_elex_glassworm_smoke-loader
Size 1.2MB
Sample260804-def56ser3v
SHA256 71dba38c8c02191e241a9e32e163d110beae36e93101462a860e5bcc8a57bd6f
MD5 548083e19f94ba95b92e71161eb48107
SHA1 45468b6fcfd13f87b92812798a38e1920be57820
SHA512 55d2a73a2df40721d00d24098c625d59130b406e891a0221db49f97e8a67eb16fa5d151860d439ffa4a15c5a89a9a280e72299e11308cd27b106fc9ad8d52de8
SSDEEP 24576:jj9Lw63ct04QFzYtNP2k9EjOLZc83gKgEem2Ns8rDaf2b3qEzWkx3:jj9LxcO4Q5YtNPFqKzT2bz
TLSH
T15A557C1277D58074E8B712B149BEAB365635F8300B2187CFA388CA6DAE71BC19E35357
MD5 SHA1 SHA512 SSDEEP TLSH

Score

5^/10

upx

UPX packed file 1 IoCs

Detects executables packed with UPX/modified UPX open source packer.

resource	yara_rule
sample	upx

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
2026-08-03_548083e19f94ba95b92e71161eb48107_amadey_elex_glassworm_smoke-loader

2026-08-03_548083e19f94ba95b92e71161eb48107_amadey_elex_glassworm_smoke-loader

.exe 1.2MB

SHA256 71dba38c8c02191e241a9e32e163d110beae36e93101462a860e5bcc8a57bd6f
MD5 548083e19f94ba95b92e71161eb48107
SHA1 45468b6fcfd13f87b92812798a38e1920be57820
SHA512 55d2a73a2df40721d00d24098c625d59130b406e891a0221db49f97e8a67eb16fa5d151860d439ffa4a15c5a89a9a280e72299e11308cd27b106fc9ad8d52de8
SSDEEP 24576:jj9Lw63ct04QFzYtNP2k9EjOLZc83gKgEem2Ns8rDaf2b3qEzWkx3:jj9LxcO4Q5YtNPFqKzT2bz
TLSH
T15A557C1277D58074E8B712B149BEAB365635F8300B2187CFA388CA6DAE71BC19E35357
MD5 SHA1 SHA512 SSDEEP TLSH

UPX packed file

Detects executables packed with UPX/modified UPX open source packer.

upx
Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

0

Major OS version

4

Entry point

4640

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LINE_NUMS_STRIPPED IMAGE_FILE_LOCAL_SYMS_STRIPPED IMAGE_FILE_DEBUG_STRIPPED

PDB paths