2026-07-24_3a786d745b8295d0773efad6753169b0_amadey_elex_glassworm_redline-stealer_rhadamanthys_smoke-loader_stop

General

Target
2026-07-24_3a786d745b8295d0773efad6753169b0_amadey_elex_glassworm_redline-stealer_rhadamanthys_smoke-loader_stop
Size 67KB
Sample260724-md891axfpc
SHA256 aa2f5f6d9e1bbdf721a941ae74a9b2d2b8decbaf99657def0ef64a9bd10f8215
MD5 3a786d745b8295d0773efad6753169b0
SHA1 49acd61bebb61c64f76381147d25bddd7dca06e4
SHA512 6ec098bc28014b093e1f20b1940a6d02e9affad8f3b4493490bdf1f668e1537a31b557a66a8615228f983126e1b2d3cb464134715a989774998773f2fcd60793
SSDEEP 768:aix+QlEv3E7yQAgCuf2T+zoI+XnUJJWGkl7mPhd61SI3NeOYWqSW55DCVu:D+YyQAg2T+zoI+UfkuXI3N5Yj55D2
TLSH
T13A637C61B690D823D05254704566E7F2AB3EB4315EA8E44BB79807FF0F211D0DB3A3AB
MD5 SHA1 SHA512 SSDEEP TLSH

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
2026-07-24_3a786d745b8295d0773efad6753169b0_amadey_elex_glassworm_redline-stealer_rhadamanthys_smoke-loader_stop

File Explorer

2026-07-24_3a786d745b8295d0773efad6753169b0_amadey_elex_glassworm_redline-stealer_rhadamanthys_smoke-loader_stop

.exe 67KB

2026-07-24_3a786d745b8295d0773efad6753169b0_amadey_elex_glassworm_redline-stealer_rhadamanthys_smoke-loader_stop

IMPHASH c6223bd1076a8bf07fe524d529af567c
SHA256 aa2f5f6d9e1bbdf721a941ae74a9b2d2b8decbaf99657def0ef64a9bd10f8215
MD5 3a786d745b8295d0773efad6753169b0
SHA1 49acd61bebb61c64f76381147d25bddd7dca06e4
SHA512 6ec098bc28014b093e1f20b1940a6d02e9affad8f3b4493490bdf1f668e1537a31b557a66a8615228f983126e1b2d3cb464134715a989774998773f2fcd60793
SSDEEP 768:aix+QlEv3E7yQAgCuf2T+zoI+XnUJJWGkl7mPhd61SI3NeOYWqSW55DCVu:D+YyQAg2T+zoI+UfkuXI3N5Yj55D2
TLSH
T13A637C61B690D823D05254704566E7F2AB3EB4315EA8E44BB79807FF0F211D0DB3A3AB
MD5 SHA1 SHA512 SSDEEP TLSH

windows:5 windows x86 arch:x86

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

0

Major OS version

5

Entry point

79337

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths

F:\信安世纪\SRC\NetSignCNG_SVN\trunk\InstallRootCert\InstallRootCert\InsertMicrosoftCert_SRC_3.0.0.0\Release\InstallDigiCertTrustedRootG4Cert.pdb

kernel32

GetLocalTime CloseHandle FindClose GetLastError FindFirstFileA WriteFile SetFilePointer GetFileSize CreateFileA DeleteFileA GetCommandLineA TerminateProcess GetCurrentProcess UnhandledExceptionFilter SetUnhandledExceptionFilter IsDebuggerPresent HeapFree GetModuleHandleW Sleep GetProcAddress ExitProcess GetStdHandle GetModuleFileNameA FreeEnvironmentStringsA GetEnvironmentStrings FreeEnvironmentStringsW WideCharToMultiByte GetEnvironmentStringsW SetHandleCount GetFileType GetStartupInfoA DeleteCriticalSection TlsGetValue TlsAlloc TlsSetValue TlsFree InterlockedIncrement SetLastError GetCurrentThreadId InterlockedDecrement HeapCreate VirtualFree QueryPerformanceCounter GetTickCount GetCurrentProcessId GetSystemTimeAsFileTime HeapAlloc RaiseException GetConsoleCP GetConsoleMode EnterCriticalSection LeaveCriticalSection GetCPInfo GetACP GetOEMCP IsValidCodePage VirtualAlloc HeapReAlloc RtlUnwind LoadLibraryA InitializeCriticalSectionAndSpinCount HeapSize SetStdHandle WriteConsoleA GetConsoleOutputCP WriteConsoleW MultiByteToWideChar LCMapStringA LCMapStringW GetStringTypeA GetStringTypeW GetLocaleInfoA FlushFileBuffers

shell32

SHGetFolderPathA

crypt32

CertAddCertificateContextToStore CertFreeCertificateContext CertOpenStore CryptStringToBinaryA CertCreateCertificateContext CertCloseStore

Sharing

General

Malware Config

Signatures

File Explorer

2026-07-24_3a786d745b8295d0773efad6753169b0_amadey_elex_glassworm_redline-stealer_rhadamanthys_smoke-loader_stop

kernel32

shell32

crypt32

generic