General
- Target 2026-04-02_16d535f46957c4ab3afe27fb32ed38f9_amadey_elex_glassworm_rhadamanthys_smoke-loader_stealc_stop
- Size 2.7MB
- Sample260402-zaemfae121
- SHA256 f6c79145e91d6050adba1ee95c2bebc96814cc0f46732565704943b32f9b3860
- MD5 16d535f46957c4ab3afe27fb32ed38f9
- SHA1 5b89fbd3b309377b51ec089a33c4148f43a5cc39
- SHA512 7e0f728d775c561395e5bbc954f408c3d5caccb222b3f38167940fafdbda8efb0c38fa58835ad6e6e2655c4e19c2284464ddaf473e5f764785bd9456bc15422c
- SSDEEP 24576:GW1YrBXOK6QQeh1551JwzQ1Ju5E0UiZTmz8rUPcMcW25SZroejHU1F1AUkd+qqAv:d1khJw8K/Z33Fh8fVp
- TLSH T101D55B13FBD5DAEEE98C143B5B668211825DE522A60F2640788CB20ECE5778B5F50F7C
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
10/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-04-02_16d535f46957c4ab3afe27fb32ed38f9_amadey_elex_glassworm_rhadamanthys_smoke-loader_stealc_stop.exe
Resource
win10v2004-20260130-en
9 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-04-02_16d535f46957c4ab3afe27fb32ed38f9_amadey_elex_glassworm_rhadamanthys_smoke-loader_stealc_stop.exe
Resource
win11-20260130-en
9 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-04-02_16d535f46957c4ab3afe27fb32ed38f9_amadey_elex_glassworm_rhadamanthys_smoke-loader_stealc_stop
- Size 2.7MB
- SHA256 f6c79145e91d6050adba1ee95c2bebc96814cc0f46732565704943b32f9b3860
- MD5 16d535f46957c4ab3afe27fb32ed38f9
- SHA1 5b89fbd3b309377b51ec089a33c4148f43a5cc39
- SHA512 7e0f728d775c561395e5bbc954f408c3d5caccb222b3f38167940fafdbda8efb0c38fa58835ad6e6e2655c4e19c2284464ddaf473e5f764785bd9456bc15422c
- SSDEEP 24576:GW1YrBXOK6QQeh1551JwzQ1Ju5E0UiZTmz8rUPcMcW25SZroejHU1F1AUkd+qqAv:d1khJw8K/Z33Fh8fVp
- TLSH T101D55B13FBD5DAEEE98C143B5B668211825DE522A60F2640788CB20ECE5778B5F50F7C
- MD5 SHA1 SHA512 SSDEEP TLSH
Score10/10-
Detects LgoogLoader payload
-
LgoogLoader
A downloader capable of dropping and executing other malware families.
-
Lgoogloader family
-
Detects Windows executables referencing non-Windows User-Agents
-
Suspicious use of SetThreadContext