General
- Target 2026-04-13_94d94e0a925c5ad082475a53a0aa8e50_amadey_elex_glassworm_njrat_redline-stealer_remcos_rhadamanthys_smoke-loader_stop
- Size 47.7MB
- Sample260413-ddj6fadt7v
- SHA256 d4d9e3185b6f0a96c91d0b3d42c5b7d84854a4bbf9b32d0d62284ccef44aa74c
- MD5 94d94e0a925c5ad082475a53a0aa8e50
- SHA1 dba656aae0b981486d2cb6553b2284686986e817
- SHA512 e491d4177a67804de5dede7f2bfcec864ec521412c60497e81ba235c92ca76069c36b78aa04abfc7c7a907d7bcaae00143ca3e44fea3de5758996f2a0fed2873
- SSDEEP 786432:QjYYFzvnHErkHvq7JB+rH92YSGRrnPgD77POdAzVPNTxqjiOgjPf:QXFbPPMJBwTfRrPg37VzVPNQmv3
- TLSH T142B73363EB515AE9E79D0536DF488150972AF22A97FF0231781812C8DE1378BBF6493C
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
10/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-04-13_94d94e0a925c5ad082475a53a0aa8e50_amadey_elex_glassworm_njrat_redline-stealer_remcos_rhada.exe
Resource
win10v2004-20260130-en
7 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-04-13_94d94e0a925c5ad082475a53a0aa8e50_amadey_elex_glassworm_njrat_redline-stealer_remcos_rhada.exe
Resource
win11-20260130-en
7 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-04-13_94d94e0a925c5ad082475a53a0aa8e50_amadey_elex_glassworm_njrat_redline-stealer_remcos_rhadamanthys_smoke-loader_stop
- Size 47.7MB
- SHA256 d4d9e3185b6f0a96c91d0b3d42c5b7d84854a4bbf9b32d0d62284ccef44aa74c
- MD5 94d94e0a925c5ad082475a53a0aa8e50
- SHA1 dba656aae0b981486d2cb6553b2284686986e817
- SHA512 e491d4177a67804de5dede7f2bfcec864ec521412c60497e81ba235c92ca76069c36b78aa04abfc7c7a907d7bcaae00143ca3e44fea3de5758996f2a0fed2873
- SSDEEP 786432:QjYYFzvnHErkHvq7JB+rH92YSGRrnPgD77POdAzVPNTxqjiOgjPf:QXFbPPMJBwTfRrPg37VzVPNQmv3
- TLSH T142B73363EB515AE9E79D0536DF488150972AF22A97FF0231781812C8DE1378BBF6493C
- MD5 SHA1 SHA512 SSDEEP TLSH
Score10/10-
Laplas family
-
Executes dropped EXE
-
Adds Run key to start application