2026-08-18_14847594dcff7977c46e9ed3db8cdf6f_amadey_elex_glassworm_smoke-loader_stop

General

Target
2026-08-18_14847594dcff7977c46e9ed3db8cdf6f_amadey_elex_glassworm_smoke-loader_stop
Size 3.5MB
Sample260818-ss6ejsdk2w
SHA256 12538ad529dcf3016f58e3c454b9c62c44dd3f13d6a886f580650cdcbef6ee49
MD5 14847594dcff7977c46e9ed3db8cdf6f
SHA1 0de771940428bebd18929d70efd1dd736ffab3c2
SHA512 4b6c2c47e9b6d62a3fc6c55c4d39292b2ddda77f7d00b48ebff2d8637b7376afcef0a4a25e0865d8a4c80d9b36fc571322f501b70cb13232a3c25d184c271f18
SSDEEP 12288:cPcMPSHM41ECYHr6n51MSDQ4kkf4rf4Ew60:+6HM41ECKr651LQzkfyfJ0
TLSH
T11406C60A81AAB612EDFFA7B79182411C2425FE596577016B346D7BACE130FDDCCB281C
MD5 SHA1 SHA512 SSDEEP TLSH

Score

10^/10

Detects executables built or packed with MPress PE compressor 1 IoCs

resource	yara_rule
sample	INDICATOR_EXE_Packed_MPress

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
2026-08-18_14847594dcff7977c46e9ed3db8cdf6f_amadey_elex_glassworm_smoke-loader_stop

2026-08-18_14847594dcff7977c46e9ed3db8cdf6f_amadey_elex_glassworm_smoke-loader_stop

.exe 3.5MB

SHA256 12538ad529dcf3016f58e3c454b9c62c44dd3f13d6a886f580650cdcbef6ee49
MD5 14847594dcff7977c46e9ed3db8cdf6f
SHA1 0de771940428bebd18929d70efd1dd736ffab3c2
SHA512 4b6c2c47e9b6d62a3fc6c55c4d39292b2ddda77f7d00b48ebff2d8637b7376afcef0a4a25e0865d8a4c80d9b36fc571322f501b70cb13232a3c25d184c271f18
SSDEEP 12288:cPcMPSHM41ECYHr6n51MSDQ4kkf4rf4Ew60:+6HM41ECKr651LQzkfyfJ0
TLSH
T11406C60A81AAB612EDFFA7B79182411C2425FE596577016B346D7BACE130FDDCCB281C
MD5 SHA1 SHA512 SSDEEP TLSH

Minor OS version

0

Major OS version

5

Entry point

149620

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE IMAGE_FILE_DEBUG_STRIPPED

PDB paths