2026-08-09_f047f8b7f413d135e017054d301e078d_amadey_glassworm_hijackloader_smoke-loader_stealc

Sharing

Copy URL Twitter E-mail

General

Target
2026-08-09_f047f8b7f413d135e017054d301e078d_amadey_glassworm_hijackloader_smoke-loader_stealc
Size 7.8MB
Sample260810-bfacxastft
SHA256 3522d6462f4fc43331eba2357c4d9f245f3eaac37cf29acf0b5167c5e6e1fad5
MD5 f047f8b7f413d135e017054d301e078d
SHA1 854124f3ce8ab5563524f69b251ec8c8554dd5aa
SHA512 a32dd926d2ac5d49b077f620d6e1422b56101f4838b368aad6f8dea4fc8d8eae7cd73a7f41b9bbef4571180ab52dd6a2517f3fd0a1482870c19dcc8f72f04140
SSDEEP 196608:B8PqaAJZRZGE+mvNyabulxrDR39h4IA48Uei9CgwDW8:i7eZRb+fabuP7fA4xkW8
TLSH
T1458612E9A0D1C0D9D24AD47DCBDD8125CF976A64E3B588FB993D03581A822C08BEDDC7
MD5 SHA1 SHA512 SSDEEP TLSH

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
2026-08-09_f047f8b7f413d135e017054d301e078d_amadey_glassworm_hijackloader_smoke-loader_stealc

File Explorer

2026-08-09_f047f8b7f413d135e017054d301e078d_amadey_glassworm_hijackloader_smoke-loader_stealc

.exe 7.8MB

2026-08-09_f047f8b7f413d135e017054d301e078d_amadey_glassworm_hijackloader_smoke-loader_stealc

IMPHASH 6df7e871f54c87f5ed50625bf24db64f
SHA256 3522d6462f4fc43331eba2357c4d9f245f3eaac37cf29acf0b5167c5e6e1fad5
MD5 f047f8b7f413d135e017054d301e078d
SHA1 854124f3ce8ab5563524f69b251ec8c8554dd5aa
SHA512 a32dd926d2ac5d49b077f620d6e1422b56101f4838b368aad6f8dea4fc8d8eae7cd73a7f41b9bbef4571180ab52dd6a2517f3fd0a1482870c19dcc8f72f04140
SSDEEP 196608:B8PqaAJZRZGE+mvNyabulxrDR39h4IA48Uei9CgwDW8:i7eZRb+fabuP7fA4xkW8
TLSH
T1458612E9A0D1C0D9D24AD47DCBDD8125CF976A64E3B588FB993D03581A822C08BEDDC7
MD5 SHA1 SHA512 SSDEEP TLSH

windows:6 windows x64 arch:x64

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

Major OS version

Entry point

37288

Magic Number

523

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LARGE_ADDRESS_AWARE

PDB paths

D:\23333\2233\2222222222222222222222222222\Release\DualExePacker.pdb

comdlg32

GetOpenFileNameW GetSaveFileNameW

kernel32

CreateDirectoryW SizeofResource SetLastError WriteFile GetModuleFileNameW WaitForMultipleObjects EnumResourceNamesW GetTempPathW WaitForSingleObject CreateFileW GetFileAttributesW SetFileAttributesW EndUpdateResourceW GetLastError LockResource DeleteFileW CloseHandle EnumResourceLanguagesW FindResourceExW LoadResource FindResourceW UpdateResourceW GetCurrentProcessId CreateProcessW FreeLibrary CopyFileW BeginUpdateResourceW GetTempFileNameW GetTickCount LoadLibraryExW FormatMessageA GetLocaleInfoEx FindClose FindFirstFileW FindFirstFileExW FindNextFileW GetFileAttributesExW SetFileInformationByHandle GetModuleHandleW GetFileInformationByHandleEx RtlCaptureContext RtlLookupFunctionEntry RtlVirtualUnwind UnhandledExceptionFilter SetUnhandledExceptionFilter GetCurrentProcess TerminateProcess IsProcessorFeaturePresent QueryPerformanceCounter GetCurrentThreadId GetSystemTimeAsFileTime InitializeSListHead IsDebuggerPresent GetStartupInfoW LocalFree

user32

GetWindowTextW UpdateWindow PostQuitMessage GetDlgItem LoadCursorW TranslateMessage RegisterClassW DispatchMessageW ShowWindow SetWindowTextW SendMessageW GetWindowTextLengthW GetMessageW DefWindowProcW MessageBoxW CreateWindowExW

msvcp140

?in@?$codecvt@DDU_Mbstatet@@@std@@QEBAHAEAU_Mbstatet@@PEBD1AEAPEBDPEAD3AEAPEAD@Z ?out@?$codecvt@DDU_Mbstatet@@@std@@QEBAHAEAU_Mbstatet@@PEBD1AEAPEBDPEAD3AEAPEAD@Z ??1?$basic_ios@DU?$char_traits@D@std@@@std@@UEAA@XZ ??1?$basic_streambuf@DU?$char_traits@D@std@@@std@@UEAA@XZ ?showmanyc@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MEAA_JXZ ?xsgetn@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MEAA_JPEAD_J@Z ?xsputn@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MEAA_JPEBD_J@Z ??1?$basic_istream@DU?$char_traits@D@std@@@std@@UEAA@XZ ?read@?$basic_istream@DU?$char_traits@D@std@@@std@@QEAAAEAV12@PEAD_J@Z ?seekg@?$basic_istream@DU?$char_traits@D@std@@@std@@QEAAAEAV12@_JH@Z ?tellg@?$basic_istream@DU?$char_traits@D@std@@@std@@QEAA?AV?$fpos@U_Mbstatet@@@2@XZ ??7ios_base@std@@QEBA_NXZ ?always_noconv@codecvt_base@std@@QEBA_NXZ ??1_Lockit@std@@QEAA@XZ ??0_Lockit@std@@QEAA@H@Z ?_Getgloballocale@locale@std@@CAPEAV_Locimp@12@XZ ?_Xbad_alloc@std@@YAXXZ ?_Id_cnt@id@locale@std@@0HA ?_Xout_of_range@std@@YAXPEBD@Z ?_Winerror_map@std@@YAHH@Z ?id@?$codecvt@DDU_Mbstatet@@@std@@2V0locale@2@A ?_Fiopen@std@@YAPEAU_iobuf@@PEB_WHH@Z ?_Xlength_error@std@@YAXPEBD@Z ?_Syserror_map@std@@YAPEBDH@Z ??0?$basic_streambuf@DU?$char_traits@D@std@@@std@@IEAA@XZ ?setstate@?$basic_ios@DU?$char_traits@D@std@@@std@@QEAAXH_N@Z ?_Getcat@?$codecvt@DDU_Mbstatet@@@std@@SA_KPEAPEBVfacet@locale@2@PEBV42@@Z ?unshift@?$codecvt@DDU_Mbstatet@@@std@@QEBAHAEAU_Mbstatet@@PEAD1AEAPEAD@Z ??0?$basic_istream@DU?$char_traits@D@std@@@std@@QEAA@PEAV?$basic_streambuf@DU?$char_traits@D@std@@@1@_N@Z ?_Init@?$basic_streambuf@DU?$char_traits@D@std@@@std@@IEAAXXZ ??0?$basic_ios@DU?$char_traits@D@std@@@std@@IEAA@XZ ?getloc@?$basic_streambuf@DU?$char_traits@D@std@@@std@@QEBA?AVlocale@2@XZ

vcruntime140_1

__CxxFrameHandler4

vcruntime140

__std_exception_destroy __std_exception_copy __std_terminate memcpy memset __C_specific_handler _CxxThrowException __current_exception __current_exception_context memmove

api-ms-win-crt-stdio-l1-1-0

setvbuf fgetpos fwrite fread _fseeki64 ungetc fclose fflush _get_stream_buffer_pointers _set_fmode fputc __p__commode fgetc fsetpos

api-ms-win-crt-heap-l1-1-0

_callnewh free _set_new_mode malloc

api-ms-win-crt-runtime-l1-1-0

_c_exit _register_thread_local_exe_atexit_callback _initialize_onexit_table _exit exit _initterm_e _initterm _get_wide_winmain_command_line _initialize_wide_environment _configure_wide_argv _set_app_type _seh_filter_exe terminate abort _register_onexit_function _crt_atexit _invoke_watson _cexit

api-ms-win-crt-filesystem-l1-1-0

_lock_file _unlock_file

api-ms-win-crt-locale-l1-1-0

_configthreadlocale

api-ms-win-crt-math-l1-1-0

__setusermatherr

Sharing

General

Malware Config

Signatures

File Explorer

2026-08-09_f047f8b7f413d135e017054d301e078d_amadey_glassworm_hijackloader_smoke-loader_stealc

comdlg32

kernel32

user32

msvcp140

vcruntime140_1

vcruntime140

api-ms-win-crt-stdio-l1-1-0

api-ms-win-crt-heap-l1-1-0

api-ms-win-crt-runtime-l1-1-0

api-ms-win-crt-filesystem-l1-1-0

api-ms-win-crt-locale-l1-1-0

api-ms-win-crt-math-l1-1-0

generic