General
- Target 2026-07-11_34a08edeb4916b7683431d97d9d5534a_amadey_elex_glassworm_remcos_rhadamanthys_smoke-loader_stop_swisyn
- Size 34.5MB
- Sample260711-vavanshs51
- SHA256 d3a0fa1e04202cf161d96645ca91c730e4d6ccacfd92c78e0423ea95bec7deca
- MD5 34a08edeb4916b7683431d97d9d5534a
- SHA1 2229ae9dd8289addb7f9f2357d050009a6c0f935
- SHA512 f378d4a27f6d160b79e4cc0d321e2c2c8aea0fc552d08df465861ba066e1c4e5fd0a9f6bc4a30d8deea4b4b7d887d0617250e06cfd7e332bc308a460a7c89881
- SSDEEP 393216:o6YJJDRZC6GFFFFFrrq/TdXhU6ADuxcdeHPgx0De:o6YFZoFFFFFK/TdeTMPgx0De
- TLSH T10387BE56B64802B1ECCE1578449EB17E6B71D3110F479BC3F258AA6CEF733D1AA39680
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
10/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-07-11_34a08edeb4916b7683431d97d9d5534a_amadey_elex_glassworm_remcos_rhadamanthys_smoke-loader_stop_swisyn.exe
Resource
win10v2004-20260513-en
10 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-07-11_34a08edeb4916b7683431d97d9d5534a_amadey_elex_glassworm_remcos_rhadamanthys_smoke-loader_stop_swisyn.exe
Resource
win11ltsc2024-20260709-en
10 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-07-11_34a08edeb4916b7683431d97d9d5534a_amadey_elex_glassworm_remcos_rhadamanthys_smoke-loader_stop_swisyn
- Size 34.5MB
- SHA256 d3a0fa1e04202cf161d96645ca91c730e4d6ccacfd92c78e0423ea95bec7deca
- MD5 34a08edeb4916b7683431d97d9d5534a
- SHA1 2229ae9dd8289addb7f9f2357d050009a6c0f935
- SHA512 f378d4a27f6d160b79e4cc0d321e2c2c8aea0fc552d08df465861ba066e1c4e5fd0a9f6bc4a30d8deea4b4b7d887d0617250e06cfd7e332bc308a460a7c89881
- SSDEEP 393216:o6YJJDRZC6GFFFFFrrq/TdXhU6ADuxcdeHPgx0De:o6YFZoFFFFFK/TdeTMPgx0De
- TLSH T10387BE56B64802B1ECCE1578449EB17E6B71D3110F479BC3F258AA6CEF733D1AA39680
- MD5 SHA1 SHA512 SSDEEP TLSH
Score10/10-
Modifies visibility of hidden/system files in Explorer
-
Executes dropped EXE
-
Adds Run key to start application
-
Drops file in System32 directory