2026-08-16_c9b8813cca5c4a306696bf5fda2f7dd7_amadey_elex_floxif_glassworm_smoke-loader

Sharing

Copy URL Twitter E-mail

General

Target
2026-08-16_c9b8813cca5c4a306696bf5fda2f7dd7_amadey_elex_floxif_glassworm_smoke-loader
Size 6.1MB
Sample260816-vc24asscrc
SHA256 e8f33832be89852f001523b13ac53ef1abb31333c113337563845df30e9961ec
MD5 c9b8813cca5c4a306696bf5fda2f7dd7
SHA1 e02c1bd13cd2c7d7ef1065c8d11fbb6e17173534
SHA512 51a4ce567a5d81f70677814eddd3d4fcef7a5e8440d06c598e1555d40e85ab32426730524afd137c3d5a9f852f6a5029ad88b8c84cb6626155e38ee0a3538c5b
SSDEEP 49152:3haPxKaekRMF46KEGzUUwu0KM+d8YS+DG4EqJtCAza9j+D5NUOWWuvks97zPokai:3ha5Ka5RvXBwu0dA7CAza9s5YH9P
TLSH
T141569D06BE6E0666C8D9073905E7A6212F3C5F89FB364BCB715DF590D8323C948BEA44
MD5 SHA1 SHA512 SSDEEP TLSH

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
2026-08-16_c9b8813cca5c4a306696bf5fda2f7dd7_amadey_elex_floxif_glassworm_smoke-loader

File Explorer

2026-08-16_c9b8813cca5c4a306696bf5fda2f7dd7_amadey_elex_floxif_glassworm_smoke-loader

.exe 6.1MB

2026-08-16_c9b8813cca5c4a306696bf5fda2f7dd7_amadey_elex_floxif_glassworm_smoke-loader

IMPHASH cd1a841d765be5a514d85e4c4c68c09b
SHA256 e8f33832be89852f001523b13ac53ef1abb31333c113337563845df30e9961ec
MD5 c9b8813cca5c4a306696bf5fda2f7dd7
SHA1 e02c1bd13cd2c7d7ef1065c8d11fbb6e17173534
SHA512 51a4ce567a5d81f70677814eddd3d4fcef7a5e8440d06c598e1555d40e85ab32426730524afd137c3d5a9f852f6a5029ad88b8c84cb6626155e38ee0a3538c5b
SSDEEP 49152:3haPxKaekRMF46KEGzUUwu0KM+d8YS+DG4EqJtCAza9j+D5NUOWWuvks97zPokai:3ha5Ka5RvXBwu0dA7CAza9s5YH9P
TLSH
T141569D06BE6E0666C8D9073905E7A6212F3C5F89FB364BCB715DF590D8323C948BEA44
MD5 SHA1 SHA512 SSDEEP TLSH

windows:4 windows x86 arch:x86

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

Major OS version

Entry point

1992835

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LINE_NUMS_STRIPPED IMAGE_FILE_LOCAL_SYMS_STRIPPED IMAGE_FILE_32BIT_MACHINE

PDB paths

D:\work\prod.tally9-erp9a.STABLE\tally.migtool\main\bin\release\tally72migration.pdb

kernel32

GlobalLock GlobalAlloc LockFile UnlockFile ReadFile FlushFileBuffers SetFilePointer SetEndOfFile WriteFile SizeofResource LockResource LoadResource FindResourceA SetLastError GetCurrentThreadId GlobalMemoryStatus GetTickCount FlushConsoleInputBuffer GetStdHandle GetSystemDirectoryA GetTimeZoneInformation GetDriveTypeA GetWindowsDirectoryA GetSystemInfo lstrlenA LocalFree HeapFree HeapAlloc GlobalUnlock GetModuleHandleA GetStartupInfoA GetCommandLineA ExitProcess EnterCriticalSection LeaveCriticalSection HeapReAlloc RtlUnwind SetConsoleCtrlHandler RaiseException HeapDestroy HeapCreate VirtualFree DeleteCriticalSection VirtualAlloc IsBadWritePtr TlsAlloc TlsFree TlsSetValue TlsGetValue HeapSize UnhandledExceptionFilter FreeEnvironmentStringsA GetEnvironmentStrings SetHandleCount GetFileType LCMapStringA GetStringTypeA SetStdHandle InterlockedExchange VirtualQuery VirtualProtect InitializeCriticalSection GetACP GetOEMCP CompareStringA SetEnvironmentVariableA GetLocaleInfoA IsBadReadPtr IsBadCodePtr GlobalFree GetVersionExA FreeLibrary GetCurrentProcessId QueryPerformanceCounter SetErrorMode GetModuleFileNameA FormatMessageA GetProfileStringA LoadLibraryA InterlockedDecrement ResetEvent OpenProcess WaitForSingleObject TerminateProcess CreateFileMappingA GetCurrentProcess DuplicateHandle CreateProcessA GetExitCodeProcess MapViewOfFile CreateEventA Beep FindNextFileA SetFileAttributesA GetLastError GetDiskFreeSpaceA CreateFileA GetFileSize CloseHandle FindFirstFileA FindClose SetUnhandledExceptionFilter DeleteFileA Sleep FileTimeToLocalFileTime ReadConsoleInputA SetConsoleMode GetConsoleMode GetCurrentDirectoryA GetSystemTimeAsFileTime GetFullPathNameA CreateDirectoryA RemoveDirectoryA LocalUnlock LocalLock LocalAlloc MoveFileExA FileTimeToSystemTime

user32

SetTimer GetWindowThreadProcessId EnumWindows SendMessageA WaitForInputIdle HideCaret CreateCaret SetCaretPos ShowCaret GetDC EnumDisplaySettingsA GetKeyboardState MessageBoxA GetWindowDC DrawIcon OpenClipboard DestroyWindow LoadIconA GetDesktopWindow RegisterClassA KillTimer GetSystemMetrics CreateWindowExA ShowWindow SetFocus GetClientRect DispatchMessageA GetQueueStatus PeekMessageA GetMessageA TranslateMessage SetWindowPos EndPaint BeginPaint DefWindowProcA SetRect FrameRect FillRect CloseClipboard GetKeyState ShowScrollBar SetClipboardData SystemParametersInfoA LoadImageA InvalidateRect SetScrollInfo SetScrollPos PostMessageA LoadCursorA EmptyClipboard GetFocus GetUpdateRect PostQuitMessage RegisterClassExA UpdateWindow PtInRect ReleaseDC GetCursorPos wsprintfA

gdi32

CreateRectRgn DeleteDC GetDeviceCaps CreateCompatibleDC GetStockObject DeleteObject SelectObject CreatePen SetTextColor CreateSolidBrush CombineRgn SetTextJustification GetDIBits SetEnhMetaFileBits GetEnhMetaFileHeader PlayEnhMetaFile CreateDCA CreateCompatibleBitmap SetBkColor GetRgnBox GetTextExtentPointA BitBlt FrameRgn SelectClipRgn CreateFontIndirectA StretchBlt MoveToEx PatBlt SetStretchBltMode TextOutA SetBkMode CreateBitmap SetTextAlign SetTextCharacterExtra Escape StartPage StartDocA AbortDoc EndDoc EndPage DeleteEnhMetaFile GetEnhMetaFileBits CloseEnhMetaFile PtInRegion CreateHalftonePalette CreatePalette GetDIBColorTable GetObjectA RealizePalette SelectPalette PaintRgn LineTo GetTextMetricsA CreateEnhMetaFileA SetRectRgn

rpcrt4

UuidFromStringA

wininet

InternetCrackUrlA InternetCanonicalizeUrlA InternetCreateUrlA InternetSetOptionA InternetCloseHandle InternetReadFile HttpSendRequestA HttpOpenRequestA InternetConnectA InternetOpenA HttpQueryInfoA InternetWriteFile HttpEndRequestA InternetQueryOptionA HttpSendRequestExA InternetQueryDataAvailable InternetAttemptConnect InternetSetFilePointer FtpOpenFileA

advapi32

CryptAcquireContextA CryptGenRandom CryptReleaseContext RegOpenKeyExA RegCloseKey RegQueryValueExA

ole32

CoCreateGuid CoCreateInstance CLSIDFromProgID CoUninitialize CoInitialize

oleaut32

VariantInit SysAllocString VariantClear SysFreeString GetErrorInfo

winspool.drv

EndDocPrinter DeviceCapabilitiesA ClosePrinter DocumentPropertiesA OpenPrinterA StartPagePrinter StartDocPrinterA EndPagePrinter WritePrinter

wsock32

connect WSACleanup accept gethostbyname ntohs recv send ioctlsocket ntohl htonl inet_addr gethostbyaddr getsockname WSASetLastError htons WSAAsyncSelect WSAStartup closesocket shutdown WSAGetLastError socket

odbc32

ord13 ord15 ord14 ord16 ord27 ord11 ord41 ord75 ord24 ord18 ord36 ord4

rasapi32

RasHangUpA

generic

count=5, id=96, productName=VS2003 (.NET) build 3077, version=3077,

count=13, id=28, productName=VS2002 (.NET) build 9466, version=9466,

count=1, id=14, version=7299,

count=2, id=19, version=8034,

count=243, id=10, productName=VS98 (6.0) build 8168, version=8168,

count=197, id=95, productName=VS2003 (.NET) SP1 build 6030, version=6030,

count=38, id=15, productName=VS2003 (.NET) SP1 build 6030, version=6030,

count=1, id=96, version=2179,

count=2, id=28, version=9177,

count=2, id=25, version=9111,

count=2, id=93, version=2067,

count=21, id=93, version=2179,

count=344, id=1, productName=Unmarked objects,

count=19, id=105, version=2067,

count=19, id=95, version=2179,

count=749, id=96, productName=VS2003 (.NET) SP1 build 6030, version=6030,

count=1, id=94, productName=VS2003 (.NET) build 3052, version=3052,

count=1, id=90, productName=VS2003 (.NET) SP1 build 6030, version=6030,