General
- Target 2026-08-09_410e0d28aa9c5d74535f1aca4a2f8767_amadey_elex_glassworm_poet-rat_smoke-loader_stop
- Size 13.6MB
- Sample260809-zt3hlswamh
- SHA256 e30f93d9e7cc965f9c024dc555230f542f125863d74405391154712fb0b48567
- MD5 410e0d28aa9c5d74535f1aca4a2f8767
- SHA1 66e248f7ad18e5afe7c09a4b43b73e10b5b2971e
- SHA512 5b0a280b0094dcb0c00a86a6da190344f781009a80d9af92c47bf87c4f682092ebec7229b80acf8203168cf7088f0752655fa030e39020755c480bc2d8e3574b
- SSDEEP 393216:AVTJra2BnSzXER8IgpTUrzz+SopcvoOQbVl4effn8:ENBncS8thgzj5voxbVKeff8
- TLSH T19DE61211EE81C93FD743E17D5809D5D7BA3A51AA628987330BE00E96CA24D4CDA17FCE
- MD5 SHA1 SHA512 SSDEEP TLSH
Behavioral task
behavioral1
Sample
2026-08-09_410e0d28aa9c5d74535f1aca4a2f8767_amadey_elex_glassworm_poet-rat_smoke-loader_stop.exe
Resource
win10v2004-20260513-en
7 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-08-09_410e0d28aa9c5d74535f1aca4a2f8767_amadey_elex_glassworm_poet-rat_smoke-loader_stop.exe
Resource
win11ltsc2024-20260709-en
6 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-08-09_410e0d28aa9c5d74535f1aca4a2f8767_amadey_elex_glassworm_poet-rat_smoke-loader_stop
- Size 13.6MB
- SHA256 e30f93d9e7cc965f9c024dc555230f542f125863d74405391154712fb0b48567
- MD5 410e0d28aa9c5d74535f1aca4a2f8767
- SHA1 66e248f7ad18e5afe7c09a4b43b73e10b5b2971e
- SHA512 5b0a280b0094dcb0c00a86a6da190344f781009a80d9af92c47bf87c4f682092ebec7229b80acf8203168cf7088f0752655fa030e39020755c480bc2d8e3574b
- SSDEEP 393216:AVTJra2BnSzXER8IgpTUrzz+SopcvoOQbVl4effn8:ENBncS8thgzj5voxbVKeff8
- TLSH T19DE61211EE81C93FD743E17D5809D5D7BA3A51AA628987330BE00E96CA24D4CDA17FCE
- MD5 SHA1 SHA512 SSDEEP TLSH
Score5/10-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.