2026-08-17_ce784a4baabd4b28862c811353c0bac0_akira_amadey_elex_glassworm

Sharing

Copy URL Twitter E-mail

General

Target
2026-08-17_ce784a4baabd4b28862c811353c0bac0_akira_amadey_elex_glassworm
Size 4.3MB
Sample260817-psfx4sbm61
SHA256 e5696595b2c62126e1ecc37cdfa9e88d5a3b18b44bcc78efe4008114031ec321
MD5 ce784a4baabd4b28862c811353c0bac0
SHA1 b309479717227cc103ea7a5faa779df756e1082a
SHA512 f7b7d039ea22084db94b827e9898cff4fea1572f830f1e7b24fadbb6295110f8f34ff519eef012fcab4f8cd5dd41e9900bd99ed494c44ee406155b4e9ef41e62
SSDEEP 49152:clHTJ7t6Ksmcj5dn8JTBvA/xbLDI5QNt/oU6mPqGC2L54KZRY8JTbBvZ31JV+xc8:cZJ5UzjeTBvuLaQNt/b7/1dv+A46Pl
TLSH
T17F26F1037BFEB05EEA7B97B4946467814625FC770D91809A31CC049B0F9B9107EBC3AA
MD5 SHA1 SHA512 SSDEEP TLSH

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
2026-08-17_ce784a4baabd4b28862c811353c0bac0_akira_amadey_elex_glassworm

File Explorer

2026-08-17_ce784a4baabd4b28862c811353c0bac0_akira_amadey_elex_glassworm

.exe 4.3MB

2026-08-17_ce784a4baabd4b28862c811353c0bac0_akira_amadey_elex_glassworm

IMPHASH 50245b2d8a36c673ebef2edb5f5c29ea
SHA256 e5696595b2c62126e1ecc37cdfa9e88d5a3b18b44bcc78efe4008114031ec321
MD5 ce784a4baabd4b28862c811353c0bac0
SHA1 b309479717227cc103ea7a5faa779df756e1082a
SHA512 f7b7d039ea22084db94b827e9898cff4fea1572f830f1e7b24fadbb6295110f8f34ff519eef012fcab4f8cd5dd41e9900bd99ed494c44ee406155b4e9ef41e62
SSDEEP 49152:clHTJ7t6Ksmcj5dn8JTBvA/xbLDI5QNt/oU6mPqGC2L54KZRY8JTbBvZ31JV+xc8:cZJ5UzjeTBvuLaQNt/b7/1dv+A46Pl
TLSH
T17F26F1037BFEB05EEA7B97B4946467814625FC770D91809A31CC049B0F9B9107EBC3AA
MD5 SHA1 SHA512 SSDEEP TLSH

windows:6 windows x86 arch:x86

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

Major OS version

Entry point

92054

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LARGE_ADDRESS_AWARE IMAGE_FILE_32BIT_MACHINE

PDB paths

installer_bb978f0b.pdb

api-ms-win-core-synch-l1-2-0

WakeByAddressSingle WaitOnAddress WakeByAddressAll

advapi32

GetTokenInformation OpenProcessToken

kernel32

HeapSize FlushFileBuffers DecodePointer GetFullPathNameW SetLastError GetLastError CreateFileW CloseHandle GetCurrentThreadId GetCurrentProcessId VirtualAlloc VirtualProtect VirtualFree GetOEMCP GetModuleHandleA GetVersionExW QueryPerformanceFrequency GetTickCount GetSystemTimePreciseAsFileTime SwitchToThread GlobalMemoryStatusEx GetCurrentProcess CreateWaitableTimerExW SetWaitableTimer WaitForSingleObject GetProcessHeap HeapAlloc HeapFree Sleep CreateThread AddVectoredExceptionHandler SetThreadStackGuarantee GetCurrentThread HeapReAlloc GetEnvironmentVariableW GetCurrentDirectoryW RtlCaptureContext GetProcAddress ReleaseMutex WaitForSingleObjectEx LoadLibraryA lstrlenW CreateMutexA WideCharToMultiByte GetStdHandle GetConsoleMode GetConsoleOutputCP MultiByteToWideChar WriteConsoleW GetModuleHandleW FormatMessageW QueryPerformanceCounter ExitProcess LCMapStringW CompareStringW InitializeCriticalSectionEx FlsFree FlsSetValue SetFilePointerEx GetSystemTimeAsFileTime InitializeSListHead IsDebuggerPresent UnhandledExceptionFilter SetUnhandledExceptionFilter GetStartupInfoW IsProcessorFeaturePresent TerminateProcess RtlUnwind EncodePointer EnterCriticalSection LeaveCriticalSection DeleteCriticalSection InitializeCriticalSectionAndSpinCount TlsAlloc TlsGetValue TlsSetValue TlsFree FreeLibrary LoadLibraryExW RaiseException WriteFile GetModuleFileNameW GetModuleHandleExW GetCommandLineA GetCommandLineW FindClose FindFirstFileExW FindNextFileW IsValidCodePage GetACP GetCPInfo GetEnvironmentStringsW FreeEnvironmentStringsW SetEnvironmentVariableW SetStdHandle GetFileType GetStringTypeW FlsAlloc FlsGetValue

user32

GetSystemMetrics GetCursorPos GetSysColor GetDesktopWindow GetMessageTime GetCaretBlinkTime GetDoubleClickTime

ntdll

RtlNtStatusToDosError NtWriteFile

Name

.text

Size

148KB

Virtual Size

148KB

Characteristics

IMAGE_SCN_CNT_CODE IMAGE_SCN_MEM_EXECUTE IMAGE_SCN_MEM_READ

Name

.rdata

Size

4.2MB

Virtual Size

4.2MB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.data

Size

2KB

Virtual Size

4KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.fptable

Size

512B

Virtual Size

128B

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.rsrc

Size

1KB

Virtual Size

1KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.reloc

Size

8KB

Virtual Size

7KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_DISCARDABLE IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

File Explorer

2026-08-17_ce784a4baabd4b28862c811353c0bac0_akira_amadey_elex_glassworm

api-ms-win-core-synch-l1-2-0

advapi32

kernel32

user32

ntdll

generic