2026-08-12_6ad4c1353e79e1d4fa7dde09dc67e831_akira_amadey_elex_glassworm

Sharing

Copy URL Twitter E-mail

General

Target
2026-08-12_6ad4c1353e79e1d4fa7dde09dc67e831_akira_amadey_elex_glassworm
Size 4.2MB
Sample260812-wdevtscl6z
SHA256 8233cc8398dee13ac7548ad7aab92b0655b40dfc0af60142d79b7a9d09acab23
MD5 6ad4c1353e79e1d4fa7dde09dc67e831
SHA1 cb83d3be1b2644be0489d03d8d2f13f0157da2b3
SHA512 c699c5b85b38db5266577b7d13d694904604aa9f4d5fbb75932501bfd372a51c4d9ef13a529a160231fc86b498ce60bf9abfd29514b127337c54aa7913c81652
SSDEEP 49152:X/v8lFhT2YXQTAv7lkO5DdGntR2lYooZaZ8Bqe6XyGaRDkZNUuHtWKBwFosu7SjP:XX8lF/Xv5DgtR2lYooq8MpyVoNUGijC
TLSH
T1111602033BFEB06EEA6B97B494A463454625FC770D51C18A35CC149B0F9B6407EBC2BA
MD5 SHA1 SHA512 SSDEEP TLSH

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
2026-08-12_6ad4c1353e79e1d4fa7dde09dc67e831_akira_amadey_elex_glassworm

File Explorer

2026-08-12_6ad4c1353e79e1d4fa7dde09dc67e831_akira_amadey_elex_glassworm

.exe 4.2MB

2026-08-12_6ad4c1353e79e1d4fa7dde09dc67e831_akira_amadey_elex_glassworm

IMPHASH 84e0a1f150787c6097c64ac1205d3ba4
SHA256 8233cc8398dee13ac7548ad7aab92b0655b40dfc0af60142d79b7a9d09acab23
MD5 6ad4c1353e79e1d4fa7dde09dc67e831
SHA1 cb83d3be1b2644be0489d03d8d2f13f0157da2b3
SHA512 c699c5b85b38db5266577b7d13d694904604aa9f4d5fbb75932501bfd372a51c4d9ef13a529a160231fc86b498ce60bf9abfd29514b127337c54aa7913c81652
SSDEEP 49152:X/v8lFhT2YXQTAv7lkO5DdGntR2lYooZaZ8Bqe6XyGaRDkZNUuHtWKBwFosu7SjP:XX8lF/Xv5DgtR2lYooq8MpyVoNUGijC
TLSH
T1111602033BFEB06EEA6B97B494A463454625FC770D51C18A35CC149B0F9B6407EBC2BA
MD5 SHA1 SHA512 SSDEEP TLSH

windows:6 windows x86 arch:x86

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

Major OS version

Entry point

91170

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LARGE_ADDRESS_AWARE IMAGE_FILE_32BIT_MACHINE

PDB paths

client_2753d37d.pdb

api-ms-win-core-synch-l1-2-0

WakeByAddressSingle WaitOnAddress WakeByAddressAll

advapi32

GetTokenInformation OpenProcessToken

kernel32

HeapSize FlushFileBuffers DecodePointer GetFullPathNameW SetLastError GetLastError CreateFileW CloseHandle GetCurrentProcessId GetCurrentThreadId VirtualAlloc VirtualProtect VirtualFree QueryPerformanceFrequency GetACP GetOEMCP GetVersionExW GetTickCount GetSystemTimePreciseAsFileTime SwitchToThread GetComputerNameW CreateWaitableTimerExW SetWaitableTimer WaitForSingleObject GetCurrentProcess Sleep CreateThread AddVectoredExceptionHandler SetThreadStackGuarantee GetCurrentThread GetProcessHeap HeapFree HeapReAlloc GetEnvironmentVariableW GetCurrentDirectoryW RtlCaptureContext GetProcAddress ReleaseMutex WaitForSingleObjectEx LoadLibraryA lstrlenW CreateMutexA WideCharToMultiByte GetStdHandle GetConsoleMode GetConsoleOutputCP MultiByteToWideChar WriteConsoleW HeapAlloc GetModuleHandleW FormatMessageW QueryPerformanceCounter GetModuleHandleA ExitProcess LCMapStringW CompareStringW InitializeCriticalSectionEx SetFilePointerEx GetSystemTimeAsFileTime InitializeSListHead IsDebuggerPresent UnhandledExceptionFilter SetUnhandledExceptionFilter GetStartupInfoW IsProcessorFeaturePresent TerminateProcess RtlUnwind EncodePointer EnterCriticalSection LeaveCriticalSection DeleteCriticalSection InitializeCriticalSectionAndSpinCount TlsAlloc TlsGetValue TlsSetValue TlsFree FreeLibrary LoadLibraryExW RaiseException WriteFile GetModuleFileNameW GetModuleHandleExW GetCommandLineA GetCommandLineW FindClose FindFirstFileExW FindNextFileW IsValidCodePage GetCPInfo GetEnvironmentStringsW FreeEnvironmentStringsW SetEnvironmentVariableW SetStdHandle GetFileType GetStringTypeW FlsAlloc FlsGetValue FlsSetValue FlsFree

user32

GetMessageTime GetDoubleClickTime GetCursorPos GetDesktopWindow

ntdll

NtWriteFile RtlNtStatusToDosError

Name

.text

Size

147KB

Virtual Size

147KB

Characteristics

IMAGE_SCN_CNT_CODE IMAGE_SCN_MEM_EXECUTE IMAGE_SCN_MEM_READ

Name

.rdata

Size

4.0MB

Virtual Size

4.0MB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.data

Size

2KB

Virtual Size

4KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.fptable

Size

512B

Virtual Size

128B

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.rsrc

Size

1KB

Virtual Size

1KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.reloc

Size

8KB

Virtual Size

7KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_DISCARDABLE IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

File Explorer

2026-08-12_6ad4c1353e79e1d4fa7dde09dc67e831_akira_amadey_elex_glassworm

api-ms-win-core-synch-l1-2-0

advapi32

kernel32

user32

ntdll

generic