2026-11-09_40266c362a209efe6bd385902cdab70c_amadey_elex_emotet_glassworm_smoke-loader_stop

Sharing

Copy URL Twitter E-mail

General

Target
2026-11-09_40266c362a209efe6bd385902cdab70c_amadey_elex_emotet_glassworm_smoke-loader_stop
Size 2.8MB
Sample261110-1nltcabe72
SHA256 db0254ccc65fd9c83073398890a14e1b48d774eeb52b6e62e3a9dd71b2d9b4dd
MD5 40266c362a209efe6bd385902cdab70c
SHA1 4ea1ae93ad09babb075c826db87923a7b27c48d9
SHA512 6c4573bf198bc92c464c72993a4e53d9bce80e8f6aa8a6cbb736d84f2d7aa272fd2c0dba4ea1a89b9bdafd14b2a5d20c7483a6d1ecb9429a40c8602fee5e502e
SSDEEP 49152:+GmDta41DkYOMwwnMb4PmyVhzc9IW1dXgfC/MHmgM3:+GCqYOXwnS4rVhzc9IW1dXgfC/MHmgM3
TLSH
T147D529C2B6C3D03BC4A6127089558AA47535BFE10B2A79C7F7843E5DEB3E580993D326
MD5 SHA1 SHA512 SSDEEP TLSH

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
2026-11-09_40266c362a209efe6bd385902cdab70c_amadey_elex_emotet_glassworm_smoke-loader_stop

File Explorer

2026-11-09_40266c362a209efe6bd385902cdab70c_amadey_elex_emotet_glassworm_smoke-loader_stop

.exe 2.8MB

2026-11-09_40266c362a209efe6bd385902cdab70c_amadey_elex_emotet_glassworm_smoke-loader_stop

IMPHASH c19c8cfa2adcd330aecd5697069a6073
SHA256 db0254ccc65fd9c83073398890a14e1b48d774eeb52b6e62e3a9dd71b2d9b4dd
MD5 40266c362a209efe6bd385902cdab70c
SHA1 4ea1ae93ad09babb075c826db87923a7b27c48d9
SHA512 6c4573bf198bc92c464c72993a4e53d9bce80e8f6aa8a6cbb736d84f2d7aa272fd2c0dba4ea1a89b9bdafd14b2a5d20c7483a6d1ecb9429a40c8602fee5e502e
SSDEEP 49152:+GmDta41DkYOMwwnMb4PmyVhzc9IW1dXgfC/MHmgM3:+GCqYOXwnS4rVhzc9IW1dXgfC/MHmgM3
TLSH
T147D529C2B6C3D03BC4A6127089558AA47535BFE10B2A79C7F7843E5DEB3E580993D326
MD5 SHA1 SHA512 SSDEEP TLSH

windows:4 windows x86 arch:x86

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

Major OS version

Entry point

29196

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LINE_NUMS_STRIPPED IMAGE_FILE_LOCAL_SYMS_STRIPPED IMAGE_FILE_32BIT_MACHINE

PDB paths

advapi32

RegQueryValueExW RegCloseKey RegOpenKeyExA RegEnumKeyExA RegQueryInfoKeyA RegQueryValueExA DeregisterEventSource ReportEventA RegisterEventSourceW RegEnumValueA GetUserNameA

comctl32

ord17

gdi32

CreateFontA DeleteDC RestoreDC DeleteObject GetTextFaceA SelectObject GetTextMetricsA GetDeviceCaps SetMapMode SaveDC Polyline CreatePen ExtTextOutW GetTextExtentPoint32W SetTextAlign SetBkMode SetTextColor CreateFontIndirectA GetObjectA

kernel32

GetModuleHandleA MultiByteToWideChar GetCommandLineA GetCommandLineW MapViewOfFile ReleaseMutex WaitForSingleObject WaitForMultipleObjects LeaveCriticalSection EnterCriticalSection ExitProcess GetStartupInfoA CloseHandle CreateThread Sleep GetCurrentProcess TerminateProcess GetCurrentProcessId LoadLibraryA SetUnhandledExceptionFilter MulDiv WideCharToMultiByte IsBadReadPtr GetModuleFileNameA GetSystemDefaultLangID GetProcAddress GetUserDefaultLangID GetACP GetSystemDefaultLCID GetVersionExA FreeLibrary InitializeCriticalSection GetProcessHeap DeleteCriticalSection lstrcpyA GetLastError GetProfileStringA SetEvent CreateSemaphoreA CreateProcessW ExpandEnvironmentStringsW CreateFileMappingA GetFileSize CreateFileA DeleteFileA DeleteFileW GetTickCount SetEnvironmentVariableA ReadProcessMemory VirtualQueryEx GetSystemInfo GetFileAttributesA CreateDirectoryA WriteFile SetFilePointer CreateFileW GetTempPathA GetTempPathW GetFileAttributesW CreateDirectoryW LockResource LoadResource FindResourceExA GetSystemDirectoryA SetEndOfFile ExpandEnvironmentStringsA IsDBCSLeadByte CreateProcessA SuspendThread GetSystemTime GetComputerNameA CreateMutexA TlsAlloc TlsFree TlsSetValue VirtualFree TlsGetValue UnmapViewOfFile SetLastError HeapAlloc GetLocaleInfoA IsValidCodePage VirtualAlloc TerminateThread GetCurrentThreadId GetThreadContext GetThreadSelectorEntry ResumeThread HeapFree GetStringTypeA GetStringTypeW RtlUnwind LCMapStringA LCMapStringW

oleaut32

SysFreeString SystemTimeToVariantTime VariantTimeToDosDateTime SysStringLen SysAllocString

shell32

ShellExecuteExA ExtractIconExA

user32

SetWindowLongA DestroyWindow MessageBoxA DrawIconEx EnableWindow CheckDlgButton GetSysColor IsDlgButtonChecked LoadIconA DrawFocusRect SetWindowTextW GetWindow LoadCursorA DestroyIcon GetWindowPlacement IsIconic wsprintfW LoadStringW GetWindowThreadProcessId EnumWindows CallWindowProcA CallWindowProcW IsWindowUnicode SystemParametersInfoA GetClientRect SendDlgItemMessageA SetFocus EndDialog GetDlgItem ShowWindow SetCursor InvalidateRect DialogBoxParamW DialogBoxParamA CreateDialogParamW CreateDialogParamA SetWindowTextA GetDC MapWindowPoints GetSysColorBrush FillRect ReleaseDC GetSystemMetrics SetForegroundWindow GetWindowLongA GetWindowRect SetWindowPos RegisterClassExA CreateWindowExA GetMessageA IsDialogMessageA TranslateMessage DispatchMessageA PostQuitMessage DefWindowProcA KillTimer wsprintfA SendMessageA PostMessageA SetScrollInfo GetScrollInfo SetDlgItemTextA SetTimer

version

VerQueryValueA GetFileVersionInfoSizeA GetFileVersionInfoSizeW GetFileVersionInfoA GetFileVersionInfoW

wininet

InternetSetOptionA InternetWriteFile HttpSendRequestExA InternetCanonicalizeUrlA InternetReadFileExA HttpEndRequestA InternetOpenA InternetSetStatusCallback InternetAutodial InternetGetConnectedState InternetQueryOptionA HttpQueryInfoA InternetCloseHandle HttpOpenRequestA InternetConnectA

Sharing

General

Malware Config

Signatures

File Explorer

2026-11-09_40266c362a209efe6bd385902cdab70c_amadey_elex_emotet_glassworm_smoke-loader_stop

advapi32

comctl32

gdi32

kernel32

oleaut32

shell32

user32

version

wininet

generic