2026-07-11_de393654efb0a9f3f20db6792982ff93_elex_glassworm_magniber_rhadamanthys_smoke-loader_stop

General

Target
2026-07-11_de393654efb0a9f3f20db6792982ff93_elex_glassworm_magniber_rhadamanthys_smoke-loader_stop
Size 783KB
Sample260711-sebysaey7w
SHA256 496c31d0c3d341171f4df16998c1f6535624e0eb5c6a5cf04fa0beb128cc33a0
MD5 de393654efb0a9f3f20db6792982ff93
SHA1 0b1729a9f0e495f4bc21d4af17173b16ffaa7646
SHA512 7a79b48c1aa6414caac0871d3d88763e83a3ef127c6e9a7a5ef31af461e8b7913eb0fa7e7f039d0460b2ee744289f4cd8b6aa72d3aa8084ce798a337426bcd9e
SSDEEP 12288:bSPWVyjZQvD1n6yrGYmqO7MgX3d9FM/TJggXe9ahpQGwvc:2ljZQv/47MgX3dXMLagXhpIU
TLSH
T177058B25776FDD15D42E1AB78862C52812B6B9078F82E77B7EC92FCF0C713894642293
MD5 SHA1 SHA512 SSDEEP TLSH

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
2026-07-11_de393654efb0a9f3f20db6792982ff93_elex_glassworm_magniber_rhadamanthys_smoke-loader_stop

File Explorer

2026-07-11_de393654efb0a9f3f20db6792982ff93_elex_glassworm_magniber_rhadamanthys_smoke-loader_stop

.exe 783KB

2026-07-11_de393654efb0a9f3f20db6792982ff93_elex_glassworm_magniber_rhadamanthys_smoke-loader_stop

IMPHASH b7ebea437c5ce69fa2a675f1af8abccd
SHA256 496c31d0c3d341171f4df16998c1f6535624e0eb5c6a5cf04fa0beb128cc33a0
MD5 de393654efb0a9f3f20db6792982ff93
SHA1 0b1729a9f0e495f4bc21d4af17173b16ffaa7646
SHA512 7a79b48c1aa6414caac0871d3d88763e83a3ef127c6e9a7a5ef31af461e8b7913eb0fa7e7f039d0460b2ee744289f4cd8b6aa72d3aa8084ce798a337426bcd9e
SSDEEP 12288:bSPWVyjZQvD1n6yrGYmqO7MgX3d9FM/TJggXe9ahpQGwvc:2ljZQv/47MgX3dXMLagXhpIU
TLSH
T177058B25776FDD15D42E1AB78862C52812B6B9078F82E77B7EC92FCF0C713894642293
MD5 SHA1 SHA512 SSDEEP TLSH

windows:5 windows x86 arch:x86

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

1

Major OS version

5

Entry point

19956

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE IMAGE_FILE_DEBUG_STRIPPED

PDB paths

kernel32

FindResourceW LoadResource WriteFile InitializeCriticalSectionAndSpinCount SizeofResource FindResourceExW MultiByteToWideChar GetTempPathW LockResource CloseHandle GetModuleHandleW CreateFileW GetTempFileNameW SetFilePointerEx SetStdHandle GetConsoleMode GetConsoleCP RaiseException GetLastError EnterCriticalSection LeaveCriticalSection DeleteCriticalSection HeapDestroy HeapAlloc HeapReAlloc HeapFree HeapSize GetProcessHeap EncodePointer DecodePointer GetCommandLineW RtlUnwind IsDebuggerPresent IsProcessorFeaturePresent InterlockedDecrement ExitProcess GetModuleHandleExW GetProcAddress AreFileApisANSI Sleep GetStdHandle GetModuleFileNameW SetLastError InterlockedIncrement GetCurrentThread GetCurrentThreadId GetFileType GetStartupInfoW QueryPerformanceCounter GetCurrentProcessId GetSystemTimeAsFileTime GetEnvironmentStringsW FreeEnvironmentStringsW UnhandledExceptionFilter SetUnhandledExceptionFilter GetCurrentProcess TerminateProcess TlsAlloc TlsGetValue TlsSetValue TlsFree CreateSemaphoreW FatalAppExitA InterlockedExchange FreeLibrary LoadLibraryExW SetConsoleCtrlHandler IsValidCodePage GetACP GetOEMCP GetCPInfo OutputDebugStringW LoadLibraryW WideCharToMultiByte GetDateFormatW GetTimeFormatW CompareStringW LCMapStringW GetLocaleInfoW IsValidLocale GetUserDefaultLCID EnumSystemLocalesW GetStringTypeW FlushFileBuffers WriteConsoleW

advapi32

RegOpenKeyExW

oleaut32

SysAllocStringLen

mscoree

CorBindToRuntimeEx

Sharing

General

Malware Config

Signatures

File Explorer

2026-07-11_de393654efb0a9f3f20db6792982ff93_elex_glassworm_magniber_rhadamanthys_smoke-loader_stop

kernel32

advapi32

oleaut32

mscoree

generic