2026-08-03_5601c4d3ad02b1614880bd10266faf2f_akira_amadey_blankgrabber_elex_glassworm_luca-stealer

General

Target
2026-08-03_5601c4d3ad02b1614880bd10266faf2f_akira_amadey_blankgrabber_elex_glassworm_luca-stealer
Size 3.9MB
Sample260804-n246maae92
SHA256 1d442d29025504414652e525f4e26a104eee664a7266aa0f0e525f14f49b8409
MD5 5601c4d3ad02b1614880bd10266faf2f
SHA1 87384c15593dfed95e00ae3af8a3e7f4b7fb5c2b
SHA512 2c360440c540befc8a20e0815a9a20a931b26e585982db4a6db6eafc4c92b6597f39d3756a3c0fd9c887168850293f254ffd1035d2fd053039921a56e1c8935c
SSDEEP 49152:/0z1f+viTnGsRHs8jVrr3TZlzW1qmHVpFkSZ6:c+v0ntHsOnaH
TLSH
T10E16AD62FF4290F7C48A01B5E42DF37D8636AD558B2A85C392E94C4F7CE12B0985739E
MD5 SHA1 SHA512 SSDEEP TLSH

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
2026-08-03_5601c4d3ad02b1614880bd10266faf2f_akira_amadey_blankgrabber_elex_glassworm_luca-stealer

File Explorer

2026-08-03_5601c4d3ad02b1614880bd10266faf2f_akira_amadey_blankgrabber_elex_glassworm_luca-stealer

.exe 3.9MB

2026-08-03_5601c4d3ad02b1614880bd10266faf2f_akira_amadey_blankgrabber_elex_glassworm_luca-stealer

IMPHASH c06cf0cb9719d4659ab380800e751381
SHA256 1d442d29025504414652e525f4e26a104eee664a7266aa0f0e525f14f49b8409
MD5 5601c4d3ad02b1614880bd10266faf2f
SHA1 87384c15593dfed95e00ae3af8a3e7f4b7fb5c2b
SHA512 2c360440c540befc8a20e0815a9a20a931b26e585982db4a6db6eafc4c92b6597f39d3756a3c0fd9c887168850293f254ffd1035d2fd053039921a56e1c8935c
SSDEEP 49152:/0z1f+viTnGsRHs8jVrr3TZlzW1qmHVpFkSZ6:c+v0ntHsOnaH
TLSH
T10E16AD62FF4290F7C48A01B5E42DF37D8636AD558B2A85C392E94C4F7CE12B0985739E
MD5 SHA1 SHA512 SSDEEP TLSH

windows:6 windows x86 arch:x86

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

0

Major OS version

6

Entry point

2221449

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LARGE_ADDRESS_AWARE IMAGE_FILE_32BIT_MACHINE

PDB paths

update.pdb

kernel32

GetModuleFileNameW SetThreadErrorMode LoadLibraryExW SetUnhandledExceptionFilter SystemTimeToFileTime SystemTimeToTzSpecificLocalTime GetTimeZoneInformationForYear CloseHandle GetCommandLineW TlsSetValue UnhandledExceptionFilter GetFileInformationByHandleEx SetFileInformationByHandle FindClose GetFullPathNameW TlsGetValue GetSystemInfo WakeAllConditionVariable WakeConditionVariable SwitchToThread SleepConditionVariableSRW GetCurrentProcess DuplicateHandle AcquireSRWLockExclusive GetFileInformationByHandle InitOnceBeginInitialize TlsAlloc InitOnceComplete TlsFree ReleaseSRWLockExclusive MultiByteToWideChar WaitForSingleObject GetCurrentThread ReleaseMutex SetLastError GetCurrentDirectoryW WaitForSingleObjectEx LoadLibraryA lstrlenW GetCurrentProcessId CreateMutexA WideCharToMultiByte GetCurrentThreadId GetEnvironmentVariableW GetModuleHandleA CreateThread GetProcAddress ReadFileEx SleepEx WriteFileEx CompareStringOrdinal GetModuleHandleW CreateFileW SetFileTime FindFirstFileExW SetFilePointerEx TryAcquireSRWLockExclusive SetHandleInformation GetSystemTimeAsFileTime CreateDirectoryW ExitProcess GetExitCodeProcess GetEnvironmentStringsW FreeEnvironmentStringsW GetSystemDirectoryW GetWindowsDirectoryW CreateProcessW GetFileAttributesW GetTempPathW RemoveDirectoryW DeleteFileW CopyFileExW MoveFileExW CreateSymbolicLinkW CreateWaitableTimerExW SetWaitableTimer Sleep SetCurrentDirectoryW FindNextFileW GetFileSizeEx OpenProcess GetProcessTimes ExpandEnvironmentStringsW GetLongPathNameW HeapSize TerminateProcess QueryFullProcessImageNameW VirtualQuery GetLastError IsWow64Process GetProcessId GetUserPreferredUILanguages LoadLibraryExA VirtualProtect SetThreadStackGuarantee GetConsoleOutputCP FreeLibrary GetProcessHeap HeapFree HeapAlloc FormatMessageW GetConsoleMode GetStdHandle WriteConsoleW SetConsoleMode SetConsoleTextAttribute GetConsoleScreenBufferInfo OutputDebugStringA OutputDebugStringW AddVectoredExceptionHandler HeapReAlloc SetStdHandle DecodePointer RtlUnwind RtlCaptureContext IsDebuggerPresent QueryPerformanceFrequency QueryPerformanceCounter RaiseException EncodePointer GetModuleHandleExW InitializeSListHead GetStartupInfoW IsProcessorFeaturePresent EnterCriticalSection LeaveCriticalSection DeleteCriticalSection InitializeCriticalSectionAndSpinCount WriteFile GetCommandLineA IsValidCodePage GetACP GetOEMCP GetCPInfo SetEnvironmentVariableW GetFileType GetStringTypeW FlsAlloc FlsGetValue FlsSetValue FlsFree InitializeCriticalSectionEx CompareStringW LCMapStringW FlushFileBuffers

ntdll

NtReadFile NtWriteFile NtCreateFile RtlInitUnicodeString NtOpenFile NtCreateNamedPipeFile RtlNtStatusToDosError NtQueryInformationProcess

user32

EndDialog AllowSetForegroundWindow SendMessageW

combase

CoTaskMemFree CoTaskMemAlloc

Name

.text

Size

2.2MB

Virtual Size

2.2MB

Characteristics

IMAGE_SCN_CNT_CODE IMAGE_SCN_MEM_EXECUTE IMAGE_SCN_MEM_READ

Name

.rdata

Size

1.4MB

Virtual Size

1.4MB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.data

Size

4KB

Virtual Size

6KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.fptable

Size

512B

Virtual Size

128B

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.rsrc

Size

186KB

Virtual Size

186KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.reloc

Size

92KB

Virtual Size

91KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_DISCARDABLE IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

File Explorer

2026-08-03_5601c4d3ad02b1614880bd10266faf2f_akira_amadey_blankgrabber_elex_glassworm_luca-stealer

kernel32

ntdll

user32

combase

generic