2026-10-10_460c513250c4d0c414ad60f59c70e792_akira_amadey_elex_glassworm

General

Target
2026-10-10_460c513250c4d0c414ad60f59c70e792_akira_amadey_elex_glassworm
Size 5.0MB
Sample261011-sw41wscc73
SHA256 e71023f5cb1769587d95a119f13a5149201ee10f02dd244f0d09a3712bc3f844
MD5 460c513250c4d0c414ad60f59c70e792
SHA1 31c51a490d6de071748e1384d18f6e97aaa2146a
SHA512 ac59ca0c97ca18ec956bf5dcd818458b86ef4330037c73000760fa9ab158084741913993fbaf266f60ca733aeae6e56ca135b0e5cad9983bd404251a9df057dc
SSDEEP 98304:W/+2P+zI+y4cAZysIhx1A/2iR+l9EDl3VxA+:KP+zILYyb04sDlF
TLSH
T1F336BF427A53A0FBC18B8130E01E9B3C5EB749256356CDD383906CB86DF63E16D7A62D
MD5 SHA1 SHA512 SSDEEP TLSH

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
2026-10-10_460c513250c4d0c414ad60f59c70e792_akira_amadey_elex_glassworm

File Explorer

2026-10-10_460c513250c4d0c414ad60f59c70e792_akira_amadey_elex_glassworm

.exe 5.0MB

2026-10-10_460c513250c4d0c414ad60f59c70e792_akira_amadey_elex_glassworm

IMPHASH 4327f53229601a574563e69931ff85fb
SHA256 e71023f5cb1769587d95a119f13a5149201ee10f02dd244f0d09a3712bc3f844
MD5 460c513250c4d0c414ad60f59c70e792
SHA1 31c51a490d6de071748e1384d18f6e97aaa2146a
SHA512 ac59ca0c97ca18ec956bf5dcd818458b86ef4330037c73000760fa9ab158084741913993fbaf266f60ca733aeae6e56ca135b0e5cad9983bd404251a9df057dc
SSDEEP 98304:W/+2P+zI+y4cAZysIhx1A/2iR+l9EDl3VxA+:KP+zILYyb04sDlF
TLSH
T1F336BF427A53A0FBC18B8130E01E9B3C5EB749256356CDD383906CB86DF63E16D7A62D
MD5 SHA1 SHA512 SSDEEP TLSH

windows:6 windows x86 arch:x86

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

0

Major OS version

6

Entry point

2741599

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_CUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LARGE_ADDRESS_AWARE IMAGE_FILE_32BIT_MACHINE

PDB paths

D:\a\1\s\ripgrep\target\i686-pc-windows-msvc\release\deps\rg.pdb

advapi32

SystemFunction036 OpenProcessToken

kernel32

CloseHandle AcquireSRWLockExclusive ReleaseSRWLockExclusive GetSystemInfo CreateFileMappingW MapViewOfFile VirtualProtect UnmapViewOfFile ReleaseMutex WaitForSingleObject CreateMutexA VirtualAlloc VirtualFree GetFileType GetLastError GetStdHandle GetConsoleMode GetFileInformationByHandleEx GetFileInformationByHandle ReleaseSRWLockShared SleepConditionVariableSRW TlsGetValue TlsSetValue GetConsoleScreenBufferInfo SetConsoleTextAttribute SetConsoleMode InitializeCriticalSection LeaveCriticalSection FreeEnvironmentStringsW FindClose CompareStringOrdinal SwitchToThread Sleep GetCurrentProcess GetCurrentThread RtlCaptureContext GetProcAddress SetLastError GetCurrentDirectoryW GetEnvironmentStringsW GetEnvironmentVariableW SetEnvironmentVariableW GetCommandLineW WriteFile FlushFileBuffers DuplicateHandle ReadFile SetFilePointerEx EnterCriticalSection GetExitCodeProcess TerminateProcess GetCurrentProcessId WakeAllConditionVariable TryEnterCriticalSection QueryPerformanceCounter GetSystemTimeAsFileTime TlsAlloc GetProcessHeap HeapAlloc HeapFree HeapReAlloc AcquireSRWLockShared AddVectoredExceptionHandler SetThreadStackGuarantee WaitForSingleObjectEx LoadLibraryA FindNextFileW CreateFileW DeviceIoControl FindFirstFileW GetFinalPathNameByHandleW DeleteCriticalSection GetModuleHandleW FormatMessageW GetModuleFileNameW ExitProcess CreateProcessW CreateNamedPipeW CreateThread QueryPerformanceFrequency GetModuleHandleA WriteConsoleW ReadConsoleW GetConsoleCP HeapSize LCMapStringW CompareStringW GetStringTypeW SetStdHandle WideCharToMultiByte MultiByteToWideChar GetCPInfo GetOEMCP GetACP IsValidCodePage FindFirstFileExW GetCommandLineA GetModuleHandleExW LoadLibraryExW FreeLibrary TlsFree InitializeCriticalSectionAndSpinCount EncodePointer UnhandledExceptionFilter SetUnhandledExceptionFilter IsProcessorFeaturePresent GetCurrentThreadId InitializeSListHead IsDebuggerPresent GetStartupInfoW RtlUnwind RaiseException DecodePointer

ws2_32

WSACleanup

userenv

GetUserProfileDirectoryW

Sharing

General

Malware Config

Signatures

File Explorer

2026-10-10_460c513250c4d0c414ad60f59c70e792_akira_amadey_elex_glassworm

advapi32

kernel32

ws2_32

userenv

generic