General
- Target 2026-07-17_31b1d856ab3aca70a4f6bf2730b054ab_amadey_dcrat_elex_glassworm_hijackloader_redline-stealer_smoke-loader_stealc_tofsee
- Size 59.5MB
- Sample260717-3ec6ysgz2k
- SHA256 0d651fa7b8550069fde84687504d0bfcad256921a5e32d132699b1bf5ef7dc5b
- MD5 31b1d856ab3aca70a4f6bf2730b054ab
- SHA1 ca34a3f9cbe56cc4a9df5d606979567fd975afbd
- SHA512 6bdb2cc0c09dc1794e644089a69652b2795080b0fd9a7b590e97d6eec9379ae080dba846e7fb7a91a9d1815d53d7522a948eb236df2ce70b11c1b6e9ccccd626
- SSDEEP 786432:v26k18EYtf8eInS8DvcK35hp7+C1f5LVo5PxwaU2A9r3wlv/SzfS8dnIPHWtDq9Y:MXih8D/3jpFnpaUhAGv2ODe5QIUWymo
- TLSH T1ADD72246F7E7C868E62B1638BBB2072506FDED65156AC30F994470DDBCB27808ED7242
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
10/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-07-17_31b1d856ab3aca70a4f6bf2730b054ab_amadey_dcrat_elex_glassworm_hijackloader_redline-stealer.exe
Resource
win10v2004-20260513-en
4 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-07-17_31b1d856ab3aca70a4f6bf2730b054ab_amadey_dcrat_elex_glassworm_hijackloader_redline-stealer.exe
Resource
win11ltsc2024-20260710-en
4 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-07-17_31b1d856ab3aca70a4f6bf2730b054ab_amadey_dcrat_elex_glassworm_hijackloader_redline-stealer_smoke-loader_stealc_tofsee
- Size 59.5MB
- SHA256 0d651fa7b8550069fde84687504d0bfcad256921a5e32d132699b1bf5ef7dc5b
- MD5 31b1d856ab3aca70a4f6bf2730b054ab
- SHA1 ca34a3f9cbe56cc4a9df5d606979567fd975afbd
- SHA512 6bdb2cc0c09dc1794e644089a69652b2795080b0fd9a7b590e97d6eec9379ae080dba846e7fb7a91a9d1815d53d7522a948eb236df2ce70b11c1b6e9ccccd626
- SSDEEP 786432:v26k18EYtf8eInS8DvcK35hp7+C1f5LVo5PxwaU2A9r3wlv/SzfS8dnIPHWtDq9Y:MXih8D/3jpFnpaUhAGv2ODe5QIUWymo
- TLSH T1ADD72246F7E7C868E62B1638BBB2072506FDED65156AC30F994470DDBCB27808ED7242
- MD5 SHA1 SHA512 SSDEEP TLSH
Score9/10-
Detects encrypted or obfuscated .NET executables