2026-04-04_722bf2b994f016603aff1285d67dedb7_elex_glassworm_njrat_rhadamanthys_smoke-loader_stop

Sharing

Copy URL Twitter E-mail

General

Target
2026-04-04_722bf2b994f016603aff1285d67dedb7_elex_glassworm_njrat_rhadamanthys_smoke-loader_stop
Size 1.8MB
Sample260404-d417msd18r
SHA256 5d831c9b3e1ba83542a89dc8e900ac79d5f14319e5a6793f555bd9f0f23b3bb2
MD5 722bf2b994f016603aff1285d67dedb7
SHA1 c817fc6c69867b5100122742c1647783a8736b94
SHA512 03d5e474642f5ea5ee40698be8f9ffc064fe4effa9689c9942d99196fcbaea2d34c445feddbf817fead62052b7e4a698c1a87d52b7ed40947dc9b1b9de3a9a1d
SSDEEP 12288:ZczguqFnTPWibmfXCK7mq96R1SAo7ZQer5+nZomLNA1YaL8i0DMUNLtG4+tbQIzv:MqlaBCq96RdoeZAVDKUTbQIzFLwL
TLSH
T146953897EB919AD8E68D09376B584140DB2EF621A75F2360746C520CCF9338B8F61E3D
MD5 SHA1 SHA512 SSDEEP TLSH

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
2026-04-04_722bf2b994f016603aff1285d67dedb7_elex_glassworm_njrat_rhadamanthys_smoke-loader_stop

File Explorer

2026-04-04_722bf2b994f016603aff1285d67dedb7_elex_glassworm_njrat_rhadamanthys_smoke-loader_stop

.exe 1.8MB

2026-04-04_722bf2b994f016603aff1285d67dedb7_elex_glassworm_njrat_rhadamanthys_smoke-loader_stop

IMPHASH 0e01523a88c7ef829ae7639fb78bdab6
SHA256 5d831c9b3e1ba83542a89dc8e900ac79d5f14319e5a6793f555bd9f0f23b3bb2
MD5 722bf2b994f016603aff1285d67dedb7
SHA1 c817fc6c69867b5100122742c1647783a8736b94
SHA512 03d5e474642f5ea5ee40698be8f9ffc064fe4effa9689c9942d99196fcbaea2d34c445feddbf817fead62052b7e4a698c1a87d52b7ed40947dc9b1b9de3a9a1d
SSDEEP 12288:ZczguqFnTPWibmfXCK7mq96R1SAo7ZQer5+nZomLNA1YaL8i0DMUNLtG4+tbQIzv:MqlaBCq96RdoeZAVDKUTbQIzFLwL
TLSH
T146953897EB919AD8E68D09376B584140DB2EF621A75F2360746C520CCF9338B8F61E3D
MD5 SHA1 SHA512 SSDEEP TLSH

windows:5 windows x86 arch:x86

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

Major OS version

Entry point

5987

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths

kernel32

GetComputerNameA GetFullPathNameA FillConsoleOutputCharacterA TryEnterCriticalSection GetDefaultCommConfigW InterlockedDecrement GetNamedPipeHandleStateA FindCloseChangeNotification GetModuleHandleW GetConsoleAliasesLengthA FormatMessageA ReadConsoleOutputA GetDateFormatA GetSystemTimes LocalShrink HeapDestroy GlobalFlags GetFileAttributesW GetBinaryTypeA GetStartupInfoW RaiseException GetLastError GetProcAddress LoadLibraryA InterlockedExchangeAdd LocalAlloc GetFileType FoldStringW EnumDateFormatsA lstrcatW FreeEnvironmentStringsW VirtualProtect FindAtomW CloseHandle DeleteAtom DebugBreak GetConsoleSelectionInfo HeapFree MultiByteToWideChar HeapAlloc GetCommandLineA GetStartupInfoA TerminateProcess GetCurrentProcess UnhandledExceptionFilter SetUnhandledExceptionFilter IsDebuggerPresent HeapCreate VirtualFree DeleteCriticalSection LeaveCriticalSection EnterCriticalSection VirtualAlloc HeapReAlloc GetCPInfo InterlockedIncrement GetACP GetOEMCP IsValidCodePage TlsGetValue TlsAlloc TlsSetValue TlsFree SetLastError GetCurrentThreadId Sleep ExitProcess WriteFile GetStdHandle GetModuleFileNameA HeapSize FreeEnvironmentStringsA GetEnvironmentStrings WideCharToMultiByte GetEnvironmentStringsW SetHandleCount QueryPerformanceCounter GetTickCount GetCurrentProcessId GetSystemTimeAsFileTime InitializeCriticalSectionAndSpinCount RtlUnwind LCMapStringA LCMapStringW GetStringTypeA GetStringTypeW GetLocaleInfoA GetModuleHandleA

user32

LoadIconW

Name

.text

Size

471KB

Virtual Size

470KB

Characteristics

IMAGE_SCN_CNT_CODE IMAGE_SCN_MEM_EXECUTE IMAGE_SCN_MEM_READ

Name

.rdata

Size

8KB

Virtual Size

7KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.data

Size

7KB

Virtual Size

68KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.rsrc

Size

102KB

Virtual Size

101KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

jfFCwLoz

Size

75KB

Virtual Size

75KB

Characteristics

Name

wBOxkGhU

Size

512B

Virtual Size

37B

Characteristics

Name

AQapxlIE

Size

5KB

Virtual Size

4KB

Characteristics

Name

QSFOtbfb

Size

19KB

Virtual Size

18KB

Characteristics

Name

TafZzJDQ

Size

1.1MB

Virtual Size

1.1MB

Characteristics

Name

VkmImVzq

Size

61KB

Virtual Size

60KB

Characteristics

Name

JpkjeQAh

Size

4KB

Virtual Size

4KB

Characteristics

Name

VHQfeGqG

Size

17KB

Virtual Size

17KB

Characteristics

Name

nIgAzSJJ

Size

2KB

Virtual Size

2KB

Characteristics

Name

TZPwkauk

Size

13KB

Virtual Size

13KB

Characteristics

Sharing

General

Malware Config

Signatures

File Explorer

2026-04-04_722bf2b994f016603aff1285d67dedb7_elex_glassworm_njrat_rhadamanthys_smoke-loader_stop

kernel32

user32

generic