2026-04-03_8264e04dc7ae760cc3a4b528413629a6_amadey_elex_glassworm_remcos_rhadamanthys_smoke-loader_stealc_stop

Sharing

Copy URL Twitter E-mail

General

Target
2026-04-03_8264e04dc7ae760cc3a4b528413629a6_amadey_elex_glassworm_remcos_rhadamanthys_smoke-loader_stealc_stop
Size 4.9MB
Sample260403-eag3cacx7z
SHA256 be99d0ef5dc3b912c16ad3d807395ece073639983cf90dbfc0d883a23686cade
MD5 8264e04dc7ae760cc3a4b528413629a6
SHA1 bbf02a2507c299a2ad62405230a19f62fb5376df
SHA512 ed2cee4003e6c1518dfd1c23da1659f8ad93c9b088f2019a5c47d2ca165d90caf09ed038ed665f3fcca47f4427068b043c86a4c7363845b41e1bb5d545e21c88
SSDEEP 98304:OcbULnLrHp/qKm2/Sb/gqAZj+UzKb3HtFPY:7I3rRb/G8+H
TLSH
T1F3368B53FBC21ED5F64E04365B440601E72AE9A5964F1361302C616DDFAB3838FA6A3F
MD5 SHA1 SHA512 SSDEEP TLSH

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
2026-04-03_8264e04dc7ae760cc3a4b528413629a6_amadey_elex_glassworm_remcos_rhadamanthys_smoke-loader_stealc_stop

File Explorer

2026-04-03_8264e04dc7ae760cc3a4b528413629a6_amadey_elex_glassworm_remcos_rhadamanthys_smoke-loader_stealc_stop

.exe 4.9MB

2026-04-03_8264e04dc7ae760cc3a4b528413629a6_amadey_elex_glassworm_remcos_rhadamanthys_smoke-loader_stealc_stop

IMPHASH a8a2fe37663684a87c2991bed3202646
SHA256 be99d0ef5dc3b912c16ad3d807395ece073639983cf90dbfc0d883a23686cade
MD5 8264e04dc7ae760cc3a4b528413629a6
SHA1 bbf02a2507c299a2ad62405230a19f62fb5376df
SHA512 ed2cee4003e6c1518dfd1c23da1659f8ad93c9b088f2019a5c47d2ca165d90caf09ed038ed665f3fcca47f4427068b043c86a4c7363845b41e1bb5d545e21c88
SSDEEP 98304:OcbULnLrHp/qKm2/Sb/gqAZj+UzKb3HtFPY:7I3rRb/G8+H
TLSH
T1F3368B53FBC21ED5F64E04365B440601E72AE9A5964F1361302C616DDFAB3838FA6A3F
MD5 SHA1 SHA512 SSDEEP TLSH

windows:5 windows x86 arch:x86

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

Major OS version

Entry point

5950

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths

kernel32

DebugActiveProcess GetComputerNameA GetFullPathNameA FillConsoleOutputCharacterA TryEnterCriticalSection GetConsoleAliasesLengthW GetNumaProcessorNode GetDefaultCommConfigW SetUnhandledExceptionFilter InterlockedDecrement WaitNamedPipeA CreateDirectoryW GlobalLock SetConsoleScreenBufferSize FindCloseChangeNotification FreeEnvironmentStringsA GetModuleHandleW GetConsoleAliasesLengthA GetUserDefaultLangID GetCommandLineA GetSystemTimes GlobalAlloc LoadLibraryW WriteConsoleOutputA HeapDestroy SetConsoleMode RaiseException GetStartupInfoA GetStdHandle GetLastError GetProcAddress LoadLibraryA UnhandledExceptionFilter FindAtomA FoldStringW GetModuleFileNameA EnumDateFormatsA VirtualProtect LocalSize CloseHandle DeleteAtom HeapFree HeapAlloc MultiByteToWideChar TerminateProcess GetCurrentProcess IsDebuggerPresent HeapCreate VirtualFree DeleteCriticalSection LeaveCriticalSection EnterCriticalSection VirtualAlloc HeapReAlloc Sleep ExitProcess WriteFile TlsGetValue TlsAlloc TlsSetValue TlsFree InterlockedIncrement SetLastError GetCurrentThreadId HeapSize GetCPInfo GetACP GetOEMCP IsValidCodePage GetEnvironmentStrings FreeEnvironmentStringsW WideCharToMultiByte GetEnvironmentStringsW SetHandleCount GetFileType QueryPerformanceCounter GetTickCount GetCurrentProcessId GetSystemTimeAsFileTime InitializeCriticalSectionAndSpinCount RtlUnwind LCMapStringA LCMapStringW GetStringTypeA GetStringTypeW GetLocaleInfoA GetModuleHandleA

Name

.text

Size

479KB

Virtual Size

479KB

Characteristics

IMAGE_SCN_CNT_CODE IMAGE_SCN_MEM_EXECUTE IMAGE_SCN_MEM_READ

Name

.rdata

Size

8KB

Virtual Size

7KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.data

Size

8KB

Virtual Size

20KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.rsrc

Size

42KB

Virtual Size

41KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

mHDyUhNj

Size

2KB

Virtual Size

2KB

Characteristics

Name

ktuckWNP

Size

3KB

Virtual Size

3KB

Characteristics

Name

BYBpnENF

Size

1KB

Virtual Size

1KB

Characteristics

Name

iPSSLlea

Size

41KB

Virtual Size

41KB

Characteristics

Name

dpiudJmd

Size

4.3MB

Virtual Size

4.3MB

Characteristics

Name

cQQZRCRx

Size

3KB

Virtual Size

3KB

Characteristics

Name

tATIsBqm

Size

3KB

Virtual Size

2KB

Characteristics

Name

cpmbjOkX

Size

5KB

Virtual Size

4KB

Characteristics

Name

NEMFZVBl

Size

3KB

Virtual Size

3KB

Characteristics

Name

kYdVuJil

Size

14KB

Virtual Size

13KB

Characteristics

Sharing

General

Malware Config

Signatures

File Explorer

2026-04-03_8264e04dc7ae760cc3a4b528413629a6_amadey_elex_glassworm_remcos_rhadamanthys_smoke-loader_stealc_stop

kernel32

generic