2026-08-08_e3f882dad0f3f3811e31554f19b20c6f_amadey_elex_glassworm_smoke-loader

Sharing

Copy URL Twitter E-mail

General

Target
2026-08-08_e3f882dad0f3f3811e31554f19b20c6f_amadey_elex_glassworm_smoke-loader
Size 1.0MB
Sample260808-pwsfbafl8v
SHA256 b4eafc92bc09bab6227b22bcaa480090c9b6dd7c31fa12e1663a7a7b8ee3c74e
MD5 e3f882dad0f3f3811e31554f19b20c6f
SHA1 75138e6badd9051a66db37d18070dab6625cfebe
SHA512 1d3d67ba04b3e01676b33fc2c7b07518755a469c6d3dc561eefae485ebd68f91c8374b2be0f02d74c0bc893d1503d95ea578d0156eb4ff355e7d87d46d7f0098
SSDEEP 24576:yM2186Dym1PNuQCjtBPObaewYjiNl9iMPo0e:yMW82v1PNuQ0I3wbiMP6
TLSH
T16F35BF437BE4D8E1D0B302B059F14A109BB7FCB60A60D61A35ACB25D1F23265CE79BB5
MD5 SHA1 SHA512 SSDEEP TLSH

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
2026-08-08_e3f882dad0f3f3811e31554f19b20c6f_amadey_elex_glassworm_smoke-loader

File Explorer

2026-08-08_e3f882dad0f3f3811e31554f19b20c6f_amadey_elex_glassworm_smoke-loader

.exe 1.0MB

2026-08-08_e3f882dad0f3f3811e31554f19b20c6f_amadey_elex_glassworm_smoke-loader

IMPHASH 6d465ff7292380a3c06ed27b9d3c4b38
SHA256 b4eafc92bc09bab6227b22bcaa480090c9b6dd7c31fa12e1663a7a7b8ee3c74e
MD5 e3f882dad0f3f3811e31554f19b20c6f
SHA1 75138e6badd9051a66db37d18070dab6625cfebe
SHA512 1d3d67ba04b3e01676b33fc2c7b07518755a469c6d3dc561eefae485ebd68f91c8374b2be0f02d74c0bc893d1503d95ea578d0156eb4ff355e7d87d46d7f0098
SSDEEP 24576:yM2186Dym1PNuQCjtBPObaewYjiNl9iMPo0e:yMW82v1PNuQ0I3wbiMP6
TLSH
T16F35BF437BE4D8E1D0B302B059F14A109BB7FCB60A60D61A35ACB25D1F23265CE79BB5
MD5 SHA1 SHA512 SSDEEP TLSH

windows:4 windows x86 arch:x86

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

Major OS version

Entry point

6900

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LINE_NUMS_STRIPPED IMAGE_FILE_LOCAL_SYMS_STRIPPED IMAGE_FILE_32BIT_MACHINE

PDB paths

kernel32

GetModuleHandleA VirtualAlloc Sleep DeleteTimerQueue GetTickCount LocalAlloc LocalReAlloc ReleaseMutex ResumeThread GetLastError VirtualLock VirtualQuery GetSystemInfo IsBadCodePtr GetProcAddress GetSystemDirectoryA GetCommandLineA VirtualProtect RtlUnwind GetLocaleInfoA GetStartupInfoA GetVersionExA HeapFree HeapAlloc ExitProcess TerminateProcess GetCurrentProcess WriteFile GetStdHandle GetModuleFileNameA UnhandledExceptionFilter FreeEnvironmentStringsA GetEnvironmentStrings FreeEnvironmentStringsW WideCharToMultiByte GetEnvironmentStringsW SetHandleCount GetFileType DeleteCriticalSection TlsFree SetLastError GetCurrentThreadId TlsSetValue TlsGetValue TlsAlloc HeapDestroy HeapCreate VirtualFree LeaveCriticalSection EnterCriticalSection HeapReAlloc LoadLibraryA GetACP GetOEMCP GetCPInfo InitializeCriticalSection RaiseException LCMapStringA MultiByteToWideChar LCMapStringW QueryPerformanceCounter GetCurrentProcessId GetSystemTimeAsFileTime HeapSize GetStringTypeA GetStringTypeW

user32

IsZoomed SendMessageA GetDC RegisterClassA DestroyWindow

gdi32

CreateDIBPatternBrushPt SelectObject GetBrushOrgEx

psapi

GetProcessMemoryInfo

gdiplus

GdipDeleteGraphics GdipCreateFromHDC

winmm

midiConnect

Name

.text

Size

29KB

Virtual Size

32KB

Characteristics

IMAGE_SCN_CNT_CODE IMAGE_SCN_MEM_EXECUTE IMAGE_SCN_MEM_READ

Name

.rdata

Size

6KB

Virtual Size

8KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.data

Size

401KB

Virtual Size

404KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.tls

Size

Virtual Size

332KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_CNT_UNINITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.rsrc

Size

17KB

Virtual Size

20KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

uaSrlTbF

Size

3KB

Virtual Size

4KB

Characteristics

Name

dzxCVIya

Size

14KB

Virtual Size

16KB

Characteristics

Name

GYgEmdEs

Size

1KB

Virtual Size

4KB

Characteristics

Name

UjaFeXTD

Size

512B

Virtual Size

4KB

Characteristics

Name

wrNqvTJF

Size

19KB

Virtual Size

20KB

Characteristics

Name

XDoWWROY

Size

5KB

Virtual Size

8KB

Characteristics

Name

pUttqIcV

Size

11KB

Virtual Size

12KB

Characteristics

Name

jPYuzkYh

Size

3KB

Virtual Size

4KB

Characteristics

Name

tKtFmCHn

Size

4KB

Virtual Size

4KB

Characteristics

Name

zgvkKwhJ

Size

3KB

Virtual Size

4KB

Characteristics

Name

wyCVyZkj

Size

512B

Virtual Size

4KB

Characteristics

Name

HWTOWbRY

Size

9KB

Virtual Size

12KB

Characteristics

Name

pbrHFNJp

Size

19KB

Virtual Size

20KB

Characteristics

Name

BukStAnK

Size

3KB

Virtual Size

4KB

Characteristics

Name

nICoVkcB

Size

3KB

Virtual Size

4KB

Characteristics

Name

LmTfgegf

Size

1024B

Virtual Size

4KB

Characteristics

Name

UkjgYxZB

Size

512B

Virtual Size

4KB

Characteristics

Name

IDKOXgpF

Size

1024B

Virtual Size

4KB

Characteristics

Name

XutLwyXO

Size

14KB

Virtual Size

16KB

Characteristics

Name

kOpBxfBT

Size

512B

Virtual Size

4KB

Characteristics

Name

TTDYRlNq

Size

4KB

Virtual Size

4KB

Characteristics

Name

Hwvcyuul

Size

30KB

Virtual Size

32KB

Characteristics

Name

PySbCFlF

Size

1KB

Virtual Size

4KB

Characteristics

Name

yxPCLrTC

Size

5KB

Virtual Size

8KB

Characteristics

Name

SleiaMLS

Size

10KB

Virtual Size

12KB

Characteristics

Name

OARGUsve

Size

1024B

Virtual Size

4KB

Characteristics

Name

JlwodhKs

Size

5KB

Virtual Size

8KB

Characteristics

Name

VTZuSDED

Size

1KB

Virtual Size

4KB

Characteristics

Name

OrLhueQO

Size

1024B

Virtual Size

4KB

Characteristics

Name

uVJzsUye

Size

4KB

Virtual Size

8KB

Characteristics

Name

oQIYVEjV

Size

3KB

Virtual Size

4KB

Characteristics

Name

mKQJIyoN

Size

1024B

Virtual Size

4KB

Characteristics

Name

HdShGjVn

Size

1KB

Virtual Size

4KB

Characteristics

Name

OhUXjQtV

Size

2KB

Virtual Size

4KB

Characteristics

Name

CXKcdYBw

Size

5KB

Virtual Size

8KB

Characteristics

Name

zrhuqaNt

Size

512B

Virtual Size

4KB

Characteristics

Name

wTaSMHSA

Size

3KB

Virtual Size

4KB

Characteristics

Name

BMwLcYqE

Size

11KB

Virtual Size

12KB

Characteristics

Name

NckgBzZg

Size

3KB

Virtual Size

4KB

Characteristics

Name

XafjzMJq

Size

2KB

Virtual Size

4KB

Characteristics

Name

pSNpmqnO

Size

9KB

Virtual Size

12KB

Characteristics

Name

uYErqOps

Size

4KB

Virtual Size

8KB

Characteristics

Name

bdzzSxRR

Size

16KB

Virtual Size

16KB

Characteristics

Name

uuBnJXdG

Size

17KB

Virtual Size

20KB

Characteristics

Name

rxpHQeqI

Size

5KB

Virtual Size

8KB

Characteristics

Name

CVeAFOKY

Size

2KB

Virtual Size

4KB

Characteristics

Name

xOzYoGhO

Size

2KB

Virtual Size

4KB

Characteristics

Name

McuneEgQ

Size

5KB

Virtual Size

8KB

Characteristics

Name

rKkbCYdJ

Size

11KB

Virtual Size

12KB

Characteristics

Name

BpDZKSUE

Size

3KB

Virtual Size

4KB

Characteristics

Name

pukNsmRR

Size

3KB

Virtual Size

4KB

Characteristics

Name

HcjKsyYG

Size

7KB

Virtual Size

8KB

Characteristics

Name

FIWgnoGx

Size

5KB

Virtual Size

8KB

Characteristics

Name

iPiJnnnA

Size

22KB

Virtual Size

24KB

Characteristics

Name

wJoWXssb

Size

512B

Virtual Size

4KB

Characteristics

Name

foOuAYfe

Size

14KB

Virtual Size

16KB

Characteristics

Name

zcWkLUCW

Size

7KB

Virtual Size

8KB

Characteristics

Name

FgNjQcXs

Size

8KB

Virtual Size

8KB

Characteristics

Name

gsvTrCyC

Size

8KB

Virtual Size

8KB

Characteristics

Name

ZStlTYBt

Size

3KB

Virtual Size

4KB

Characteristics

Name

rIXdMkQW

Size

85KB

Virtual Size

88KB

Characteristics

Name

NbxIWGMi

Size

512B

Virtual Size

4KB

Characteristics

Name

uqUKNQzw

Size

4KB

Virtual Size

4KB

Characteristics

Name

WzqyPxnP

Size

9KB

Virtual Size

12KB

Characteristics

Name

OiQVHDKS

Size

3KB

Virtual Size

4KB

Characteristics

Name

FOGnBfUH

Size

15KB

Virtual Size

16KB

Characteristics

Name

MfKLDwwf

Size

2KB

Virtual Size

4KB

Characteristics

Name

BzDFRIAj

Size

1024B

Virtual Size

4KB

Characteristics

Name

MTuGvTfq

Size

5KB

Virtual Size

8KB

Characteristics

Name

NOXxOshS

Size

18KB

Virtual Size

20KB

Characteristics

Name

pKdEMVJZ

Size

9KB

Virtual Size

12KB

Characteristics

Name

TUzkSibs

Size

3KB

Virtual Size

4KB

Characteristics

Name

nCKAYerp

Size

15KB

Virtual Size

16KB

Characteristics

Name

EODRMSzo

Size

60KB

Virtual Size

60KB

Characteristics

Name

tdyGzmEx

Size

1024B

Virtual Size

4KB

Characteristics

Sharing

General

Malware Config

Signatures

File Explorer

2026-08-08_e3f882dad0f3f3811e31554f19b20c6f_amadey_elex_glassworm_smoke-loader

kernel32

user32

gdi32

psapi

gdiplus

winmm

generic