2026-08-19_fbce3da71ebfb857371391bc4dd6153e_akira_amadey_elex_glassworm

Sharing

Copy URL Twitter E-mail

General

Target
2026-08-19_fbce3da71ebfb857371391bc4dd6153e_akira_amadey_elex_glassworm
Size 6.3MB
Sample260819-mnehdasbmd
SHA256 1b0868151e6487341c0677a99af15c391a2f964c42dd87aeeddd36c7ec2ed6d0
MD5 fbce3da71ebfb857371391bc4dd6153e
SHA1 9d9676a10e198811d24d46cc7976f67cd261bd95
SHA512 a1539c7d8016d160a6ff389f96dad7416a3ef78919c8a36d8b124ae2f0ac60e4aa2792203a07d09ae296c21ba1772b1bd9a25b7e7dff83b02a665a6c7ecade1a
SSDEEP 196608:d3PNDeBj7G6/EAxTKqhUNrlfxcy/7up4CAOHFj+3+gVQ0ap5v9pDZDCtWgQcaiOw:d3VDeBji6/EAxTKqhUNrlfxcy/7up4DV
TLSH
T1A4667C03BB42E0FBC04742B0A01D937C9A779518A7068ED3D688ADB869E57E12D7773D
MD5 SHA1 SHA512 SSDEEP TLSH

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
2026-08-19_fbce3da71ebfb857371391bc4dd6153e_akira_amadey_elex_glassworm

File Explorer

2026-08-19_fbce3da71ebfb857371391bc4dd6153e_akira_amadey_elex_glassworm

.exe 6.3MB

2026-08-19_fbce3da71ebfb857371391bc4dd6153e_akira_amadey_elex_glassworm

IMPHASH 8247d720da16ace914364390fbab9f8b
SHA256 1b0868151e6487341c0677a99af15c391a2f964c42dd87aeeddd36c7ec2ed6d0
MD5 fbce3da71ebfb857371391bc4dd6153e
SHA1 9d9676a10e198811d24d46cc7976f67cd261bd95
SHA512 a1539c7d8016d160a6ff389f96dad7416a3ef78919c8a36d8b124ae2f0ac60e4aa2792203a07d09ae296c21ba1772b1bd9a25b7e7dff83b02a665a6c7ecade1a
SSDEEP 196608:d3PNDeBj7G6/EAxTKqhUNrlfxcy/7up4CAOHFj+3+gVQ0ap5v9pDZDCtWgQcaiOw:d3VDeBji6/EAxTKqhUNrlfxcy/7up4DV
TLSH
T1A4667C03BB42E0FBC04742B0A01D937C9A779518A7068ED3D688ADB869E57E12D7773D
MD5 SHA1 SHA512 SSDEEP TLSH

windows:6 windows x86 arch:x86

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

Major OS version

Entry point

4637033

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LARGE_ADDRESS_AWARE IMAGE_FILE_32BIT_MACHINE

PDB paths

D:\tauri\scrm\src-tauri\target\i686-pc-windows-msvc\release\deps\曙光医疗管理系统.pdb

secur32

AcceptSecurityContext InitializeSecurityContextW FreeContextBuffer DeleteSecurityContext DecryptMessage ApplyControlToken EncryptMessage QueryContextAttributesW FreeCredentialsHandle AcquireCredentialsHandleA

crypt32

CertGetCertificateChain CertVerifyCertificateChainPolicy CertFreeCertificateContext CertDuplicateCertificateContext CertDuplicateCertificateChain CertDuplicateStore CertCloseStore CertOpenStore CertFreeCertificateChain CertAddCertificateContextToStore CertEnumCertificatesInStore

advapi32

SystemFunction036 RegGetValueW EventUnregister EventWriteTransfer EventSetInformation EventRegister RegQueryValueExW RegCloseKey RegOpenKeyExW

kernel32

GlobalUnlock GetLastError FormatMessageW GetModuleHandleW Sleep SetUnhandledExceptionFilter GlobalLock GlobalSize GetProcAddress GetModuleHandleW AcquireSRWLockShared UnhandledExceptionFilter GlobalAlloc IsDebuggerPresent AcquireSRWLockExclusive ReleaseSRWLockExclusive GlobalFree MultiByteToWideChar CloseHandle ReleaseSRWLockShared InitializeSListHead lstrlenW TryAcquireSRWLockExclusive TlsGetValue TlsSetValue GetTempPathW GetUserDefaultUILanguage LCIDToLocaleName GetSystemTimeAsFileTime LoadLibraryW GetProcAddress InitOnceComplete TlsAlloc InitOnceBeginInitialize CreateThread WriteConsoleW UpdateProcThreadAttribute InitializeProcThreadAttributeList CreateProcessW GetWindowsDirectoryW GetSystemDirectoryW CreateNamedPipeW LoadLibraryA GetFullPathNameW ExitProcess GetFinalPathNameByHandleW MoveFileExW DeleteFileW FindFirstFileW CreateDirectoryW IsProcessorFeaturePresent GetFileInformationByHandleEx CreateFileW CreateMutexA WaitForSingleObjectEx HeapReAlloc QueryPerformanceFrequency WakeAllConditionVariable TerminateProcess RtlUnwind RaiseException TlsFree ReadFileEx SleepEx WriteFileEx GetCurrentProcessId GetStdHandle GetCommandLineW GetCurrentThreadId SetEnvironmentVariableW GetEnvironmentStringsW GetCurrentDirectoryW GetFileAttributesW GetModuleFileNameW OutputDebugStringA OutputDebugStringW EncodePointer LoadLibraryExW FreeLibrary GetEnvironmentVariableW InitializeCriticalSectionAndSpinCount GetCurrentProcess DuplicateHandle GetSystemInfo SetLastError RtlCaptureContext GetCurrentThread QueryPerformanceCounter SwitchToThread SetThreadStackGuarantee AddVectoredExceptionHandler CompareStringOrdinal DeleteProcThreadAttributeList FindClose ReleaseMutex SetHandleInformation FreeEnvironmentStringsW GetConsoleMode SleepConditionVariableSRW GetFileInformationByHandle GetModuleHandleA DeleteCriticalSection WaitForSingleObject CreateIoCompletionPort GetQueuedCompletionStatusEx PostQueuedCompletionStatus HeapFree SetFileCompletionNotificationModes HeapAlloc GetProcessHeap

user32

CreateMenu SetMenuItemInfoW SendInput SetForegroundWindow RedrawWindow ValidateRect GetWindowTextW GetWindowTextLengthW SetWindowTextW MonitorFromPoint EnumDisplayMonitors SetWindowDisplayAffinity PostThreadMessageW GetSystemMenu ShowWindow CheckMenuItem EnableMenuItem SendMessageW IsProcessDPIAware CreateAcceleratorTableW DestroyIcon DestroyAcceleratorTable ToUnicodeEx GetKeyboardLayout PeekMessageW SystemParametersInfoA IsWindowVisible ClipCursor GetClipCursor ShowCursor AdjustWindowRectEx GetMenu GetUpdateRect GetWindowRect AppendMenuW CreateIcon GetRawInputData VkKeyScanW MapVirtualKeyExW GetKeyState GetAsyncKeyState GetKeyboardState SetCapture SetWindowLongW MsgWaitForMultipleObjectsEx RegisterRawInputDevices MapVirtualKeyW RegisterWindowMessageA GetMessageW EnumChildWindows GetAncestor PostQuitMessage TranslateAcceleratorW RegisterClipboardFormatW TranslateMessage DispatchMessageW PostMessageW DefWindowProcW FlashWindowEx ScreenToClient MonitorFromRect RegisterClassExW DestroyWindow DispatchMessageA CloseClipboard SetClipboardData EmptyClipboard GetDC GetClipboardData IsClipboardFormatAvailable OpenClipboard TrackMouseEvent GetMessageA GetWindowLongW GetForegroundWindow GetActiveWindow SetCursorPos ReleaseCapture IsIconic SetMenu GetClientRect ClientToScreen RegisterTouchWindow GetSystemMetrics IsWindow CreateWindowExW LoadCursorW InvalidateRgn GetWindowPlacement SetWindowPlacement ChangeDisplaySettingsExW GetMonitorInfoW SetCursor SetWindowPos MonitorFromWindow GetCursorPos CloseTouchInputHandle GetTouchInputInfo

comctl32

DefSubclassProc RemoveWindowSubclass SetWindowSubclass

ole32

CoUninitialize CreateStreamOnHGlobal CoCreateInstance CoTaskMemFree RegisterDragDrop OleInitialize RevokeDragDrop CoInitializeEx CoTaskMemAlloc

shell32

DragQueryFileW ShellExecuteW SHAppBarMessage DragFinish SHGetKnownFolderPath

gdi32

CreateRectRgn DeleteObject GetDeviceCaps

dwmapi

DwmEnableBlurBehindWindow

ws2_32

ioctlsocket connect shutdown freeaddrinfo bind WSASocketW closesocket WSACleanup getpeername WSAStartup getaddrinfo getsockname recv getsockopt send WSASend setsockopt WSAIoctl WSAGetLastError

uxtheme

SetWindowTheme

ntdll

NtCreateFile NtDeviceIoControlFile RtlNtStatusToDosError NtWriteFile NtCancelIoFileEx

oleaut32

SysFreeString GetErrorInfo SetErrorInfo SysStringLen

bcrypt

BCryptGenRandom

api-ms-win-crt-math-l1-1-0

__setusermatherr round pow trunc floor

api-ms-win-crt-string-l1-1-0

_wcsicmp wcsncmp wcslen strcpy_s

api-ms-win-crt-runtime-l1-1-0

_exit _initterm_e terminate _initterm __p___argc _get_initial_narrow_environment _initialize_narrow_environment _cexit _c_exit _register_thread_local_exe_atexit_callback _configure_narrow_argv _set_app_type exit _initialize_onexit_table _register_onexit_function _crt_atexit _controlfp_s _seh_filter_exe __p___argv abort

api-ms-win-crt-convert-l1-1-0

wcstol _ultow_s

api-ms-win-crt-stdio-l1-1-0

_set_fmode __p__commode

api-ms-win-crt-locale-l1-1-0

_configthreadlocale

api-ms-win-crt-heap-l1-1-0

calloc free malloc _callnewh _set_new_mode

Sharing

General

Malware Config

Signatures

File Explorer

2026-08-19_fbce3da71ebfb857371391bc4dd6153e_akira_amadey_elex_glassworm

secur32

crypt32

advapi32

kernel32

user32

comctl32

ole32

shell32

gdi32

dwmapi

ws2_32

uxtheme

ntdll

oleaut32

bcrypt

api-ms-win-crt-math-l1-1-0

api-ms-win-crt-string-l1-1-0

api-ms-win-crt-runtime-l1-1-0

api-ms-win-crt-convert-l1-1-0

api-ms-win-crt-stdio-l1-1-0

api-ms-win-crt-locale-l1-1-0

api-ms-win-crt-heap-l1-1-0

generic