2026-10-21_8f2d0473d2d7b933774ac34c37d5908c_amadey_elex_floxif_glassworm_smoke-loader

Sharing

Copy URL Twitter E-mail

General

Target
2026-10-21_8f2d0473d2d7b933774ac34c37d5908c_amadey_elex_floxif_glassworm_smoke-loader
Size 6.1MB
Sample261022-wcdalsd18t
SHA256 0d556f7083d03dfe320dd84be7242f7da5e30dd8981413d69ab791dc72de284b
MD5 8f2d0473d2d7b933774ac34c37d5908c
SHA1 23fd196c98f9c3dc1b2732237aa772f91c40d18f
SHA512 69118c16b3e77c49c9cdaa107eb381b1b0b1e66162bb5c3d5aef4c6e1e11efaf596328c84f22a400153d1f2b04a76f97b1e72a517c7dae4b4c7b5d8e4ec6d7dd
SSDEEP 49152:3haPxKZewRMF46KEGzUUwu0KM+W8YS+DG4EqJtCAza9j+D5NUOWWuvks97zPokat:3ha5KZtRvXBwu0dz7CAza9s5YH94
TLSH
T131569E06BE6E0766C8D9073905E7A6212F3C5F89F7364BCB7259F590D8323C948BEA44
MD5 SHA1 SHA512 SSDEEP TLSH

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
2026-10-21_8f2d0473d2d7b933774ac34c37d5908c_amadey_elex_floxif_glassworm_smoke-loader

File Explorer

2026-10-21_8f2d0473d2d7b933774ac34c37d5908c_amadey_elex_floxif_glassworm_smoke-loader

.exe 6.1MB

2026-10-21_8f2d0473d2d7b933774ac34c37d5908c_amadey_elex_floxif_glassworm_smoke-loader

IMPHASH cd1a841d765be5a514d85e4c4c68c09b
SHA256 0d556f7083d03dfe320dd84be7242f7da5e30dd8981413d69ab791dc72de284b
MD5 8f2d0473d2d7b933774ac34c37d5908c
SHA1 23fd196c98f9c3dc1b2732237aa772f91c40d18f
SHA512 69118c16b3e77c49c9cdaa107eb381b1b0b1e66162bb5c3d5aef4c6e1e11efaf596328c84f22a400153d1f2b04a76f97b1e72a517c7dae4b4c7b5d8e4ec6d7dd
SSDEEP 49152:3haPxKZewRMF46KEGzUUwu0KM+W8YS+DG4EqJtCAza9j+D5NUOWWuvks97zPokat:3ha5KZtRvXBwu0dz7CAza9s5YH94
TLSH
T131569E06BE6E0766C8D9073905E7A6212F3C5F89F7364BCB7259F590D8323C948BEA44
MD5 SHA1 SHA512 SSDEEP TLSH

windows:4 windows x86 arch:x86

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

Major OS version

Entry point

1992835

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LINE_NUMS_STRIPPED IMAGE_FILE_LOCAL_SYMS_STRIPPED IMAGE_FILE_32BIT_MACHINE

PDB paths

D:\work\prod.tally9-erp9a.STABLE\tally.migtool\main\bin\release\tally72migration.pdb

kernel32

GlobalLock GlobalAlloc LockFile UnlockFile ReadFile FlushFileBuffers SetFilePointer SetEndOfFile WriteFile SizeofResource LockResource LoadResource FindResourceA SetLastError GetCurrentThreadId GlobalMemoryStatus GetTickCount FlushConsoleInputBuffer GetStdHandle GetSystemDirectoryA GetTimeZoneInformation GetDriveTypeA GetWindowsDirectoryA GetSystemInfo lstrlenA LocalFree HeapFree HeapAlloc GlobalUnlock GetModuleHandleA GetStartupInfoA GetCommandLineA ExitProcess EnterCriticalSection LeaveCriticalSection HeapReAlloc RtlUnwind SetConsoleCtrlHandler RaiseException HeapDestroy HeapCreate VirtualFree DeleteCriticalSection VirtualAlloc IsBadWritePtr TlsAlloc TlsFree TlsSetValue TlsGetValue HeapSize UnhandledExceptionFilter FreeEnvironmentStringsA GetEnvironmentStrings SetHandleCount GetFileType LCMapStringA GetStringTypeA SetStdHandle InterlockedExchange VirtualQuery VirtualProtect InitializeCriticalSection GetACP GetOEMCP CompareStringA SetEnvironmentVariableA GetLocaleInfoA IsBadReadPtr IsBadCodePtr GlobalFree GetVersionExA FreeLibrary GetCurrentProcessId QueryPerformanceCounter SetErrorMode GetModuleFileNameA FormatMessageA GetProfileStringA LoadLibraryA InterlockedDecrement ResetEvent OpenProcess WaitForSingleObject TerminateProcess CreateFileMappingA GetCurrentProcess DuplicateHandle CreateProcessA GetExitCodeProcess MapViewOfFile CreateEventA Beep FindNextFileA SetFileAttributesA GetLastError GetDiskFreeSpaceA CreateFileA GetFileSize CloseHandle FindFirstFileA FindClose SetUnhandledExceptionFilter DeleteFileA Sleep FileTimeToLocalFileTime ReadConsoleInputA SetConsoleMode GetConsoleMode GetCurrentDirectoryA GetSystemTimeAsFileTime GetFullPathNameA CreateDirectoryA RemoveDirectoryA LocalUnlock LocalLock LocalAlloc MoveFileExA FileTimeToSystemTime

user32

SetTimer GetWindowThreadProcessId EnumWindows SendMessageA WaitForInputIdle HideCaret CreateCaret SetCaretPos ShowCaret GetDC EnumDisplaySettingsA GetKeyboardState MessageBoxA GetWindowDC DrawIcon OpenClipboard DestroyWindow LoadIconA GetDesktopWindow RegisterClassA KillTimer GetSystemMetrics CreateWindowExA ShowWindow SetFocus GetClientRect DispatchMessageA GetQueueStatus PeekMessageA GetMessageA TranslateMessage SetWindowPos EndPaint BeginPaint DefWindowProcA SetRect FrameRect FillRect CloseClipboard GetKeyState ShowScrollBar SetClipboardData SystemParametersInfoA LoadImageA InvalidateRect SetScrollInfo SetScrollPos PostMessageA LoadCursorA EmptyClipboard GetFocus GetUpdateRect PostQuitMessage RegisterClassExA UpdateWindow PtInRect ReleaseDC GetCursorPos wsprintfA

gdi32

CreateRectRgn DeleteDC GetDeviceCaps CreateCompatibleDC GetStockObject DeleteObject SelectObject CreatePen SetTextColor CreateSolidBrush CombineRgn SetTextJustification GetDIBits SetEnhMetaFileBits GetEnhMetaFileHeader PlayEnhMetaFile CreateDCA CreateCompatibleBitmap SetBkColor GetRgnBox GetTextExtentPointA BitBlt FrameRgn SelectClipRgn CreateFontIndirectA StretchBlt MoveToEx PatBlt SetStretchBltMode TextOutA SetBkMode CreateBitmap SetTextAlign SetTextCharacterExtra Escape StartPage StartDocA AbortDoc EndDoc EndPage DeleteEnhMetaFile GetEnhMetaFileBits CloseEnhMetaFile PtInRegion CreateHalftonePalette CreatePalette GetDIBColorTable GetObjectA RealizePalette SelectPalette PaintRgn LineTo GetTextMetricsA CreateEnhMetaFileA SetRectRgn

rpcrt4

UuidFromStringA

wininet

InternetCrackUrlA InternetCanonicalizeUrlA InternetCreateUrlA InternetSetOptionA InternetCloseHandle InternetReadFile HttpSendRequestA HttpOpenRequestA InternetConnectA InternetOpenA HttpQueryInfoA InternetWriteFile HttpEndRequestA InternetQueryOptionA HttpSendRequestExA InternetQueryDataAvailable InternetAttemptConnect InternetSetFilePointer FtpOpenFileA

advapi32

CryptAcquireContextA CryptGenRandom CryptReleaseContext RegOpenKeyExA RegCloseKey RegQueryValueExA

ole32

CoCreateGuid CoCreateInstance CLSIDFromProgID CoUninitialize CoInitialize

oleaut32

VariantInit SysAllocString VariantClear SysFreeString GetErrorInfo

winspool.drv

EndDocPrinter DeviceCapabilitiesA ClosePrinter DocumentPropertiesA OpenPrinterA StartPagePrinter StartDocPrinterA EndPagePrinter WritePrinter

wsock32

connect WSACleanup accept gethostbyname ntohs recv send ioctlsocket ntohl htonl inet_addr gethostbyaddr getsockname WSASetLastError htons WSAAsyncSelect WSAStartup closesocket shutdown WSAGetLastError socket

odbc32

ord13 ord15 ord14 ord16 ord27 ord11 ord41 ord75 ord24 ord18 ord36 ord4

rasapi32

RasHangUpA

generic

count=5, id=96, productName=VS2003 (.NET) build 3077, version=3077,

count=13, id=28, productName=VS2002 (.NET) build 9466, version=9466,

count=1, id=14, version=7299,

count=2, id=19, version=8034,

count=243, id=10, productName=VS98 (6.0) build 8168, version=8168,

count=197, id=95, productName=VS2003 (.NET) SP1 build 6030, version=6030,

count=38, id=15, productName=VS2003 (.NET) SP1 build 6030, version=6030,

count=1, id=96, version=2179,

count=2, id=28, version=9177,

count=2, id=25, version=9111,

count=2, id=93, version=2067,

count=21, id=93, version=2179,

count=344, id=1, productName=Unmarked objects,

count=19, id=105, version=2067,

count=19, id=95, version=2179,

count=749, id=96, productName=VS2003 (.NET) SP1 build 6030, version=6030,

count=1, id=94, productName=VS2003 (.NET) build 3052, version=3052,

count=1, id=90, productName=VS2003 (.NET) SP1 build 6030, version=6030,