Analysis
- max time kernel
148s - platform
windows11-ltsc_2024_x64 - resource
win11ltsc2024-20260709-en - resource tags
arch:x64arch:x86image:win11ltsc2024-20260709-enlocale:en-usos:windows11-ltsc_2024-x64systemwindows - submitted
15/07/2026, 00:52
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-07-14_51c3713dd439c3ad9a12eaa38683072c_amadey_elex_glassworm_rhadamanthys_smoke-loader_stealc_stop.exe
Resource
win10v2004-20260513-en
1 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-07-14_51c3713dd439c3ad9a12eaa38683072c_amadey_elex_glassworm_rhadamanthys_smoke-loader_stealc_stop.exe
Resource
win11ltsc2024-20260709-en
1 signatures
150 seconds
General
- Target 2026-07-14_51c3713dd439c3ad9a12eaa38683072c_amadey_elex_glassworm_rhadamanthys_smoke-loader_stealc_stop.exe
- Size 1.2MB
- Sample260715-a76prabs8y
- SHA256 dbd423cd7583193d03d4f68284b4fd0f609dca271d5f2c08a432c68e8d99d0a6
- MD5 51c3713dd439c3ad9a12eaa38683072c
- SHA1 04287765563b8520c8e18a41c39608d060b2e3a3
- SHA512 f1c6f96e0a028342f1c836d047a460325093ef02c0b8ab75656ff16c8e5f4adbd09a8394a5c5b0eb17bca2d412ae7e51383d6134a4907f3a90b60b529cc57688
- SSDEEP 24576:HA/+xE1gROjGMhoCEgcBnCT4nbnnQ/tbw/2Mkjy6Fr7g0on:HAqE1QOjOC1T4nbnQ/lFTjN4
- TLSH T19045E00BB68294B7E57301B560B393764E37EA21472AD6C3B79828658F313E05E3E3D5
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
3/10
Malware Config
Signatures
- System Location Discovery: System Language Discovery 1 TTPs 1 IoCs
Attempt gather information about the system language of a victim in order to infer the geographical location of that host.
description ioc Process Key opened \REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language 2026-07-14_51c3713dd439c3ad9a12eaa38683072c_amadey_elex_glassworm_rhadamanthys_smoke-loader_stealc_stop.exe
Processes
-
C:\Users\Admin\AppData\Local\Temp\2026-07-14_51c3713dd439c3ad9a12eaa38683072c_amadey_elex_glassworm_rhadamanthys_smoke-loader_stealc_stop.exe"C:\Users\Admin\AppData\Local\Temp\2026-07-14_51c3713dd439c3ad9a12eaa38683072c_amadey_elex_glassworm_rhadamanthys_smoke-loader_stealc_stop.exe"1⤵
- System Location Discovery: System Language Discovery
PID:5088