2026-09-29_0e04269b7a0b12ece70ae4879362cc59_amadey_elex_floxif_glassworm_smoke-loader

Sharing

Copy URL Twitter E-mail

General

Target
2026-09-29_0e04269b7a0b12ece70ae4879362cc59_amadey_elex_floxif_glassworm_smoke-loader
Size 6.1MB
Sample260930-ga7dcafg75
SHA256 11972bf768152a49f7ada27846049f52c571756a44bb3b2dc79c3029ae8b68b9
MD5 0e04269b7a0b12ece70ae4879362cc59
SHA1 979e824e127459746142f13ee1443dd67601a363
SHA512 2a4757aa438ec1f29cc4522102b8ff6e8dce254b7dbaa3dcfd3812b1027a6402bdeae458e001d469563c717cfc0b14623c002c6c4cf3a969cf5ecf08841ac596
SSDEEP 49152:bnuog8orNEnOJqx7ac7OT/lUm3RhgJIC9E+64WUOWWu0ks97zPokaoBxyPMufZ8K:KogN6nOJqxhyTi64HZ85PPH9q
TLSH
T1C3569E0AFE5F4162C86A133015AB66356F345FCFB6375BDB5298FCA0E833349456A328
MD5 SHA1 SHA512 SSDEEP TLSH

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
2026-09-29_0e04269b7a0b12ece70ae4879362cc59_amadey_elex_floxif_glassworm_smoke-loader

File Explorer

2026-09-29_0e04269b7a0b12ece70ae4879362cc59_amadey_elex_floxif_glassworm_smoke-loader

.exe 6.1MB

2026-09-29_0e04269b7a0b12ece70ae4879362cc59_amadey_elex_floxif_glassworm_smoke-loader

IMPHASH c680cd2312df277f74d0aefa3c7c47ca
SHA256 11972bf768152a49f7ada27846049f52c571756a44bb3b2dc79c3029ae8b68b9
MD5 0e04269b7a0b12ece70ae4879362cc59
SHA1 979e824e127459746142f13ee1443dd67601a363
SHA512 2a4757aa438ec1f29cc4522102b8ff6e8dce254b7dbaa3dcfd3812b1027a6402bdeae458e001d469563c717cfc0b14623c002c6c4cf3a969cf5ecf08841ac596
SSDEEP 49152:bnuog8orNEnOJqx7ac7OT/lUm3RhgJIC9E+64WUOWWu0ks97zPokaoBxyPMufZ8K:KogN6nOJqxhyTi64HZ85PPH9q
TLSH
T1C3569E0AFE5F4162C86A133015AB66356F345FCFB6375BDB5298FCA0E833349456A328
MD5 SHA1 SHA512 SSDEEP TLSH

windows:4 windows x86 arch:x86

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

Major OS version

Entry point

2107353

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LINE_NUMS_STRIPPED IMAGE_FILE_LOCAL_SYMS_STRIPPED IMAGE_FILE_32BIT_MACHINE

PDB paths

kernel32

GetCurrentDirectoryA GetFullPathNameA GetConsoleMode SetConsoleMode ReadConsoleInputA FileTimeToLocalFileTime FileTimeToSystemTime IsBadCodePtr IsBadReadPtr SetConsoleCtrlHandler RaiseException FlushConsoleInputBuffer lstrlenA GetLocaleInfoA VirtualQuery VirtualProtect SetStdHandle SetEnvironmentVariableA GetOEMCP GetACP CompareStringW GetCPInfo CompareStringA GetStringTypeW GetStringTypeA LCMapStringA GetFileType SetHandleCount GetEnvironmentStringsW FreeEnvironmentStringsW GetEnvironmentStrings FreeEnvironmentStringsA UnhandledExceptionFilter GetStdHandle HeapSize IsBadWritePtr VirtualAlloc VirtualFree HeapCreate HeapDestroy RtlUnwind HeapReAlloc ExitProcess GetCommandLineA GetStartupInfoA GetSystemTimeAsFileTime HeapAlloc HeapFree SetLastError GetModuleHandleA MoveFileExA LocalAlloc LocalLock LocalUnlock LocalFree GetSystemInfo GlobalMemoryStatus GetDriveTypeA GetTimeZoneInformation GetCurrentThreadId GetTickCount GetSystemDirectoryA SetEndOfFile FlushFileBuffers WriteFile UnlockFile LockFile ReadFile SetFilePointer LockResource LoadResource SizeofResource FindResourceA GlobalAlloc GlobalLock GlobalUnlock GlobalFree GetVersionExA FreeLibrary GetCurrentProcessId QueryPerformanceCounter GetModuleFileNameA SetErrorMode GetProcAddress LoadLibraryA GetProfileStringA InterlockedDecrement MapViewOfFile CreateFileMappingA CreateEventA RemoveDirectoryA GetCurrentProcess DuplicateHandle ResetEvent OpenProcess TerminateProcess WaitForSingleObject GetExitCodeProcess CreateProcessA Beep FindNextFileA SetFileAttributesA GetFileSize CloseHandle CreateFileA FindClose FindFirstFileA GetLastError GetDiskFreeSpaceA WideCharToMultiByte MultiByteToWideChar SetUnhandledExceptionFilter DeleteFileA Sleep CreateDirectoryA LCMapStringW

user32

GetSystemMetrics SetFocus ShowWindow CreateWindowExA RegisterClassA wsprintfA ReleaseDC GetWindowDC DrawIcon MessageBoxA GetKeyState GetClipboardData OpenClipboard CloseClipboard SetClipboardData EmptyClipboard FillRect FrameRect GetClientRect GetWindowLongA SetWindowLongA DestroyWindow DefWindowProcA SetScrollPos GetUpdateRect GetKeyboardState SetCaretPos ShowCaret HideCaret CreateCaret GetDC EnumDisplaySettingsA GetWindowThreadProcessId SendMessageA EnumWindows BeginPaint EndPaint LoadIconA LoadCursorA SetRect SystemParametersInfoA WaitForInputIdle PostMessageA KillTimer SetTimer GetFocus LoadImageA PeekMessageA GetMessageA TranslateMessage DispatchMessageA GetQueueStatus InvalidateRect UpdateWindow SetWindowPos RegisterClassExA GetCursorPos PtInRect ShowScrollBar SetScrollInfo PostQuitMessage GetDesktopWindow

winspool.drv

ClosePrinter EndDocPrinter DeviceCapabilitiesA DocumentPropertiesA EndPagePrinter OpenPrinterA StartDocPrinterA StartPagePrinter WritePrinter

gdi32

RealizePalette SelectPalette GetDIBColorTable CreateHalftonePalette GetObjectA PtInRegion EndDoc AbortDoc Escape CloseEnhMetaFile DeleteEnhMetaFile EndPage StartDocA StartPage SetTextCharacterExtra BitBlt FrameRgn GetRgnBox CreateFontIndirectA SetBkColor CreatePalette CreateBitmap CreatePen CreateSolidBrush SelectClipRgn SelectObject SetBkMode SetTextAlign GetTextExtentPointA PatBlt StretchBlt SetStretchBltMode MoveToEx TextOutA DeleteObject CreateCompatibleDC CreateRectRgn DeleteDC GetDeviceCaps GetStockObject SetRectRgn CombineRgn PaintRgn LineTo GetTextMetricsA CreateDCA CreateCompatibleBitmap CreateEnhMetaFileA SetEnhMetaFileBits GetEnhMetaFileHeader PlayEnhMetaFile GetDIBits SetTextJustification SetTextColor GetEnhMetaFileBits

wininet

InternetCrackUrlA InternetCanonicalizeUrlA InternetSetFilePointer FtpOpenFileA HttpSendRequestExA InternetQueryOptionA HttpQueryInfoA InternetWriteFile HttpEndRequestA InternetAttemptConnect InternetQueryDataAvailable InternetOpenA InternetCloseHandle InternetConnectA InternetReadFile HttpOpenRequestA HttpSendRequestA InternetSetOptionA InternetCreateUrlA

wsock32

htonl htons socket ntohl WSACleanup inet_addr gethostbyaddr getsockname shutdown connect WSASetLastError gethostbyname ioctlsocket ntohs send WSAGetLastError recv WSAAsyncSelect accept closesocket WSAStartup

odbc32

ord36 ord4 ord27 ord15 ord14 ord16 ord13 ord18 ord11 ord41 ord75 ord24

advapi32

RegQueryValueExA RegOpenKeyExA CryptAcquireContextA CryptReleaseContext CryptGenRandom RegCloseKey

rpcrt4

UuidFromStringA

rasapi32

RasHangUpA

ole32

CoInitialize CoCreateGuid CoCreateInstance CoUninitialize CLSIDFromProgID

oleaut32

VariantInit GetErrorInfo SysAllocString VariantClear SysFreeString

Name

.text

Size

2.1MB

Virtual Size

2.1MB

Characteristics

IMAGE_SCN_CNT_CODE IMAGE_SCN_MEM_EXECUTE IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.rdata

Size

148KB

Virtual Size

145KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.data

Size

92KB

Virtual Size

1.0MB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.data1

Size

36KB

Virtual Size

33KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.rsrc

Size

3.5MB

Virtual Size

3.5MB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.reloc

Size

152KB

Virtual Size

149KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_DISCARDABLE IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

File Explorer

2026-09-29_0e04269b7a0b12ece70ae4879362cc59_amadey_elex_floxif_glassworm_smoke-loader

kernel32

user32

winspool.drv

gdi32

wininet

wsock32

odbc32

advapi32

rpcrt4

rasapi32

ole32

oleaut32

generic