General
- Target 2026-05-24_9452c26336b8441259b9ebc88a6ae389_amadey_elex_glassworm_hijackloader_icedid_njrat_rhadamanthys_stop_vidar
- Size 5.0MB
- Sample260524-vs87jsb13r
- SHA256 494fa84a1c6fafec9cfb7efc1345292136d75f93f0eabd91ccda5bbbc600ebd0
- MD5 9452c26336b8441259b9ebc88a6ae389
- SHA1 9fe286c4a11f6b86b8026ab48e02f48aa45eb25c
- SHA512 da4fd76d798f7ff2b0179634a2d21f1a4827f0b6f424bb7e67ead41cc463989b78777e50892b283d3b50abb3a29c83a3bedca93eab0c1f771735e935376a7fdd
- SSDEEP 98304:7fkZclW0MMHMMMvMMZMMMlmMMMiMMMYJMMHMMM6MMZMMMqNMMzMMMUMMVMMMYJMf:zPlWuTfLd5
- TLSH T1E3367D1273F88627E0BA927EC0715A79A7757C2B9B32C74F3104B65E1D727828927723
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
10/10
Static task
static1
3 signatures
Behavioral task
behavioral1
Sample
2026-05-24_9452c26336b8441259b9ebc88a6ae389_amadey_elex_glassworm_hijackloader_icedid_njrat_rhadamanthys_stop_vidar.exe
Resource
win10v2004-20260513-en
6 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-05-24_9452c26336b8441259b9ebc88a6ae389_amadey_elex_glassworm_hijackloader_icedid_njrat_rhadamanthys_stop_vidar.exe
Resource
win11-20260513-en
6 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-05-24_9452c26336b8441259b9ebc88a6ae389_amadey_elex_glassworm_hijackloader_icedid_njrat_rhadamanthys_stop_vidar
- Size 5.0MB
- SHA256 494fa84a1c6fafec9cfb7efc1345292136d75f93f0eabd91ccda5bbbc600ebd0
- MD5 9452c26336b8441259b9ebc88a6ae389
- SHA1 9fe286c4a11f6b86b8026ab48e02f48aa45eb25c
- SHA512 da4fd76d798f7ff2b0179634a2d21f1a4827f0b6f424bb7e67ead41cc463989b78777e50892b283d3b50abb3a29c83a3bedca93eab0c1f771735e935376a7fdd
- SSDEEP 98304:7fkZclW0MMHMMMvMMZMMMlmMMMiMMMYJMMHMMM6MMZMMMqNMMzMMMUMMVMMMYJMf:zPlWuTfLd5
- TLSH T1E3367D1273F88627E0BA927EC0715A79A7757C2B9B32C74F3104B65E1D727828927723
- MD5 SHA1 SHA512 SSDEEP TLSH
Score9/10-
Detects executables containing URLs to raw contents of a Github gist
-
Detects executables embedding registry key / value combination indicative of disabling Windows Defen
-
Drops file in System32 directory