2026-06-27_000fb0e71dcda3d3434db80bed3a397e_amadey_elex_glassworm_rhadamanthys_smoke-loader_stealc_stop_tofsee

Sharing

Copy URL Twitter E-mail

General

Target
2026-06-27_000fb0e71dcda3d3434db80bed3a397e_amadey_elex_glassworm_rhadamanthys_smoke-loader_stealc_stop_tofsee
Size 13.3MB
Sample260629-msjynaa12x
SHA256 3f9f8724c26c402b43f99157de88af0bb32581bf91200a44b893c86d46a17fd5
MD5 000fb0e71dcda3d3434db80bed3a397e
SHA1 dbdafd361f801a36b4baf5ffa062e7c6b461275d
SHA512 5a11dcf0f72d3d004b55c63a2eb74f3c1a7aed7ab60a9b0df06cd5c5281062ced09df56dfe53e87d0af0a5d255219a2ebce38c4151485df79589768b7e00402e
SSDEEP 12288:aercM3OHIH8zmwIk1vPQ6tq4WL1AA1Ya:a4cuOoamwIOHQ6s4pAV
TLSH
T126E6EA437202B8E2DA1606F86C55A5D4A363A8B0BF5146E37D44F34F8C637CDBE87A25
MD5 SHA1 SHA512 SSDEEP TLSH

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
2026-06-27_000fb0e71dcda3d3434db80bed3a397e_amadey_elex_glassworm_rhadamanthys_smoke-loader_stealc_stop_tofsee

File Explorer

2026-06-27_000fb0e71dcda3d3434db80bed3a397e_amadey_elex_glassworm_rhadamanthys_smoke-loader_stealc_stop_tofsee

.exe 13.3MB

2026-06-27_000fb0e71dcda3d3434db80bed3a397e_amadey_elex_glassworm_rhadamanthys_smoke-loader_stealc_stop_tofsee

IMPHASH 3b66c21f6efd18c330b0dafb9b5476c4
SHA256 3f9f8724c26c402b43f99157de88af0bb32581bf91200a44b893c86d46a17fd5
MD5 000fb0e71dcda3d3434db80bed3a397e
SHA1 dbdafd361f801a36b4baf5ffa062e7c6b461275d
SHA512 5a11dcf0f72d3d004b55c63a2eb74f3c1a7aed7ab60a9b0df06cd5c5281062ced09df56dfe53e87d0af0a5d255219a2ebce38c4151485df79589768b7e00402e
SSDEEP 12288:aercM3OHIH8zmwIk1vPQ6tq4WL1AA1Ya:a4cuOoamwIOHQ6s4pAV
TLSH
T126E6EA437202B8E2DA1606F86C55A5D4A363A8B0BF5146E37D44F34F8C637CDBE87A25
MD5 SHA1 SHA512 SSDEEP TLSH

windows:5 windows x86 arch:x86

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

Major OS version

Entry point

41736

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths

kernel32

GetNumaProcessorNode GetStringTypeA SetUnhandledExceptionFilter InterlockedIncrement EnumCalendarInfoW GetEnvironmentStringsW SetComputerNameW FreeEnvironmentStringsA GetModuleHandleW GetTickCount EnumResourceTypesA GetDriveTypeA SetHandleCount WideCharToMultiByte GetConsoleAliasExesLengthW SetConsoleCP GetComputerNameExA SetConsoleMode GetConsoleAliasW GetFileAttributesW HeapQueryInformation lstrcmpW GetVolumePathNameA FindNextVolumeMountPointW GetStringTypeExA GetNamedPipeHandleStateW EnumSystemLocalesA CreateMutexW InterlockedFlushSList SetLastError GetProcAddress RemoveDirectoryA PrepareTape GetPrivateProfileStringA LoadLibraryA OpenMutexA LocalAlloc SetCalendarInfoW AddVectoredExceptionHandler GetCommMask GetModuleFileNameA Process32NextW FindNextFileA GetModuleHandleA CreateMutexA RequestWakeupLatency GetVersionExA FindAtomW GetCurrentProcessId GetFileInformationByHandle GetConsoleProcessList DeleteFileA CloseHandle WriteConsoleW OpenMutexW DebugActiveProcess InterlockedDecrement EncodePointer DecodePointer Sleep InterlockedExchange InitializeCriticalSection DeleteCriticalSection EnterCriticalSection LeaveCriticalSection GetLastError HeapFree HeapReAlloc GetCommandLineA HeapSetInformation GetStartupInfoW RaiseException RtlUnwind HeapAlloc LCMapStringW MultiByteToWideChar GetCPInfo IsProcessorFeaturePresent HeapCreate HeapDestroy SetFilePointer GetStdHandle InitializeCriticalSectionAndSpinCount GetFileType UnhandledExceptionFilter IsDebuggerPresent TerminateProcess GetCurrentProcess HeapSize ExitProcess WriteFile GetModuleFileNameW FreeEnvironmentStringsW TlsAlloc TlsGetValue TlsSetValue TlsFree GetCurrentThreadId GetCurrentThread QueryPerformanceCounter GetSystemTimeAsFileTime GetLocaleInfoW FatalAppExitA GetACP GetOEMCP IsValidCodePage GetUserDefaultLCID GetLocaleInfoA IsValidLocale GetStringTypeW SetConsoleCtrlHandler SetStdHandle GetConsoleCP GetConsoleMode FlushFileBuffers FreeLibrary LoadLibraryW CreateFileW

user32

GetMenu

advapi32

ReportEventA

Name

.text

Size

165KB

Virtual Size

165KB

Characteristics

IMAGE_SCN_CNT_CODE IMAGE_SCN_MEM_EXECUTE IMAGE_SCN_MEM_READ

Name

.data

Size

80KB

Virtual Size

3.7MB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.rsrc

Size

100KB

Virtual Size

100KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

xYsIzdUk

Size

9KB

Virtual Size

9KB

Characteristics

Name

byWDGqss

Size

3KB

Virtual Size

3KB

Characteristics

Name

kplWjkuL

Size

3KB

Virtual Size

2KB

Characteristics

Name

DFgJyDOp

Size

66KB

Virtual Size

65KB

Characteristics

Name

KNTKPIPM

Size

446KB

Virtual Size

445KB

Characteristics

Name

lhElvYnG

Size

14KB

Virtual Size

13KB

Characteristics

Name

QQPSbYBK

Size

2KB

Virtual Size

1KB

Characteristics

Name

xguqSwyc

Size

39KB

Virtual Size

38KB

Characteristics

Name

OIFNLJqB

Size

2KB

Virtual Size

2KB

Characteristics

Name

GhPgdAFz

Size

12.4MB

Virtual Size

23KB

Characteristics

Sharing

General

Malware Config

Signatures

File Explorer

2026-06-27_000fb0e71dcda3d3434db80bed3a397e_amadey_elex_glassworm_rhadamanthys_smoke-loader_stealc_stop_tofsee

kernel32

user32

advapi32

generic