General
- Target 2026-08-25_a6b7f8a3d411d1eb5f0b1781c0ccee8f_akira_amadey_elex_glassworm
- Size 3.7MB
- Sample260826-rvmjsaeq5y
- SHA256 7573d4f1f5498ed74c7dfd4679266163c7d0f7c260ad3bc11c23636ed9ea9c1d
- MD5 a6b7f8a3d411d1eb5f0b1781c0ccee8f
- SHA1 005afbcc2f104d172c4ab19c69d3046b1c8cc5e3
- SHA512 fb5de40748eb618629bc633bcec730e9d1b317967f469406186d89a6eacc01493c891e9110922c0a08d757680f1673ae1b85530017ddaf79d4d8296ac3e97c9f
- SSDEEP 24576:ArN689fVIQjuBmbFPJVFpvsyu8GelJXS8tUjxacmqzHcgjWz6j63gnMzOP5cYzeD:ArNJVTlpHfC861O0cYGwVzEnWQ
- TLSH T19C062BA2A6D6BBF9C24B607014B5A525FA3E06358B048FF3D346CC2C36B7EB55D38095
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
9/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-08-25_a6b7f8a3d411d1eb5f0b1781c0ccee8f_akira_amadey_elex_glassworm.exe
Resource
win10v2004-20260513-en
7 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-08-25_a6b7f8a3d411d1eb5f0b1781c0ccee8f_akira_amadey_elex_glassworm.exe
Resource
win11ltsc2024-20260709-en
7 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-08-25_a6b7f8a3d411d1eb5f0b1781c0ccee8f_akira_amadey_elex_glassworm
- Size 3.7MB
- SHA256 7573d4f1f5498ed74c7dfd4679266163c7d0f7c260ad3bc11c23636ed9ea9c1d
- MD5 a6b7f8a3d411d1eb5f0b1781c0ccee8f
- SHA1 005afbcc2f104d172c4ab19c69d3046b1c8cc5e3
- SHA512 fb5de40748eb618629bc633bcec730e9d1b317967f469406186d89a6eacc01493c891e9110922c0a08d757680f1673ae1b85530017ddaf79d4d8296ac3e97c9f
- SSDEEP 24576:ArN689fVIQjuBmbFPJVFpvsyu8GelJXS8tUjxacmqzHcgjWz6j63gnMzOP5cYzeD:ArNJVTlpHfC861O0cYGwVzEnWQ
- TLSH T19C062BA2A6D6BBF9C24B607014B5A525FA3E06358B048FF3D346CC2C36B7EB55D38095
- MD5 SHA1 SHA512 SSDEEP TLSH
Score9/10-
Detect binaries embedding considerable number of MFA browser extension IDs.
-
Detect binaries embedding considerable number of cryptocurrency wallet browser extension IDs.
-
Detects binaries (Windows and macOS) referencing many web browsers. Observed in information stealers
-
Detects executables containing bas64 encoded gzip files
-
Executes dropped EXE