2026-04-09_98e0700f7dd35888cc30829b5f147e4b_amadey_elex_glassworm_icedid_njrat_redline-stealer_rhadamanthys_sakula_smoke-loader_stealc_stop

Sharing

Copy URL Twitter E-mail

General

Target
2026-04-09_98e0700f7dd35888cc30829b5f147e4b_amadey_elex_glassworm_icedid_njrat_redline-stealer_rhadamanthys_sakula_smoke-loader_stealc_stop
Size 1.4MB
Sample260409-a46kkshx2x
SHA256 9656d227ed9cb8a10dcd9f7397989837d16782eac24417759d9ba819bf9930ee
MD5 98e0700f7dd35888cc30829b5f147e4b
SHA1 d591ef3c55715a955650dbc200b469ff5539f08b
SHA512 2388fb4addc4738907de75d26a8029e188ec0c852afdd6c694d7ede738f89bbd1da5314a2ac9257a5e86328022d158de7968d687ad207ac5f156360955a292d1
SSDEEP 12288:mMpZejpz9a+FXhJ7L10A1YaL8Rmer5+nIwaJKer5+nso:RZkpz9a+LJCAVa3
TLSH
T12C657C53E7814AD9E79D0476DF148150972AF229A7FF6221385812CDEE5338BBF21A3C
MD5 SHA1 SHA512 SSDEEP TLSH

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
2026-04-09_98e0700f7dd35888cc30829b5f147e4b_amadey_elex_glassworm_icedid_njrat_redline-stealer_rhadamanthys_sakula_smoke-loader_stealc_stop

File Explorer

2026-04-09_98e0700f7dd35888cc30829b5f147e4b_amadey_elex_glassworm_icedid_njrat_redline-stealer_rhadamanthys_sakula_smoke-loader_stealc_stop

.exe 1.4MB

2026-04-09_98e0700f7dd35888cc30829b5f147e4b_amadey_elex_glassworm_icedid_njrat_redline-stealer_rhadamanthys_sakula_smoke-loader_stealc_stop

IMPHASH 8e6ac5a04c6d48e1f76509e2cb5b37f1
SHA256 9656d227ed9cb8a10dcd9f7397989837d16782eac24417759d9ba819bf9930ee
MD5 98e0700f7dd35888cc30829b5f147e4b
SHA1 d591ef3c55715a955650dbc200b469ff5539f08b
SHA512 2388fb4addc4738907de75d26a8029e188ec0c852afdd6c694d7ede738f89bbd1da5314a2ac9257a5e86328022d158de7968d687ad207ac5f156360955a292d1
SSDEEP 12288:mMpZejpz9a+FXhJ7L10A1YaL8Rmer5+nIwaJKer5+nso:RZkpz9a+LJCAVa3
TLSH
T12C657C53E7814AD9E79D0476DF148150972AF229A7FF6221385812CDEE5338BBF21A3C
MD5 SHA1 SHA512 SSDEEP TLSH

windows:5 windows x86 arch:x86

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

Major OS version

Entry point

18933

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths

kernel32

CreateProcessW ClearCommError InterlockedDecrement GetCurrentProcess SetEnvironmentVariableW CreateJobObjectW SetComputerNameW GetComputerNameW GetTimeFormatA GetCurrencyFormatA GetConsoleAliasExesW EnumTimeFormatsW TlsSetValue GetEnvironmentStrings GlobalAlloc SetFileShortNameW GetLocaleInfoW ReadConsoleInputA GetCalendarInfoW SetVolumeMountPointA GetFileAttributesA CreateSemaphoreA GetModuleFileNameW CreateActCtxA GetShortPathNameA CommConfigDialogA InterlockedExchange GetLogicalDriveStringsA GetLastError GetCurrentDirectoryW SetLastError GetProcAddress DefineDosDeviceW CreateNamedPipeA FindClose LoadLibraryA InterlockedExchangeAdd CreateHardLinkW GetNumberFormatW GetCommMask EnumDateFormatsA GlobalUnWire OpenEventW GetShortPathNameW GetDiskFreeSpaceExA GetVersionExA ReadConsoleInputW GetTempPathA LocalFree SetFileAttributesW LCMapStringW VerifyVersionInfoW GlobalCompact UnhandledExceptionFilter SetUnhandledExceptionFilter HeapAlloc GetStartupInfoW GetModuleHandleW Sleep ExitProcess WriteFile GetStdHandle GetModuleFileNameA DeleteCriticalSection LeaveCriticalSection EnterCriticalSection HeapFree VirtualFree VirtualAlloc HeapReAlloc HeapCreate TlsGetValue TlsAlloc TlsFree InterlockedIncrement GetCurrentThreadId HeapSize TerminateProcess IsDebuggerPresent SetHandleCount GetFileType GetStartupInfoA SetFilePointer FreeEnvironmentStringsW GetEnvironmentStringsW GetCommandLineW QueryPerformanceCounter GetTickCount GetCurrentProcessId GetSystemTimeAsFileTime InitializeCriticalSectionAndSpinCount RtlUnwind GetCPInfo GetACP GetOEMCP IsValidCodePage ReadFile SetStdHandle WideCharToMultiByte GetConsoleCP GetConsoleMode FlushFileBuffers GetLocaleInfoA GetModuleHandleA RaiseException GetStringTypeA MultiByteToWideChar GetStringTypeW LCMapStringA WriteConsoleA GetConsoleOutputCP WriteConsoleW CloseHandle CreateFileA

gdi32

GetCharWidth32A

Name

.text

Size

286KB

Virtual Size

285KB

Characteristics

IMAGE_SCN_CNT_CODE IMAGE_SCN_MEM_EXECUTE IMAGE_SCN_MEM_READ

Name

.data

Size

24KB

Virtual Size

70KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.badib

Size

1024B

Virtual Size

1024B

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.joxev

Size

512B

Virtual Size

214B

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.rsrc

Size

47KB

Virtual Size

47KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.reloc

Size

5KB

Virtual Size

5KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_DISCARDABLE IMAGE_SCN_MEM_READ

Name

vuPyoqtz

Size

26KB

Virtual Size

25KB

Characteristics

Name

OeSAWdVf

Size

2KB

Virtual Size

2KB

Characteristics

Name

CUVOwUcb

Size

5KB

Virtual Size

4KB

Characteristics

Name

JCUNGQVi

Size

47KB

Virtual Size

47KB

Characteristics

Name

MdmrSGEY

Size

638KB

Virtual Size

638KB

Characteristics

Name

cnjYfcRK

Size

213KB

Virtual Size

212KB

Characteristics

Name

yoMNAlzQ

Size

4KB

Virtual Size

3KB

Characteristics

Name

QduTsSBd

Size

43KB

Virtual Size

42KB

Characteristics

Name

ilBrjeug

Size

3KB

Virtual Size

2KB

Characteristics

Name

ZRjaHuRe

Size

123KB

Virtual Size

122KB

Characteristics

Sharing

General

Malware Config

Signatures

File Explorer

2026-04-09_98e0700f7dd35888cc30829b5f147e4b_amadey_elex_glassworm_icedid_njrat_redline-stealer_rhadamanthys_sakula_smoke-loader_stealc_stop

kernel32

gdi32

generic