General
- Target 2026-08-03_a13b2a607b317eb16cdbdb8da46eef65_amadey_elex_glassworm_redline-stealer_remcos_rhadamanthys_smoke-loader_stealc
- Size 2.6MB
- Sample260803-vwvtbstglb
- SHA256 ab604817849846f13bf3b7456047932a59fcbdd6222378965764063fd3b56682
- MD5 a13b2a607b317eb16cdbdb8da46eef65
- SHA1 ae4c52824bf17e4e82705378f7aaa794a34ed50a
- SHA512 a72d55970a23359d66173fcb49bcadc4a8e8d00d07dfde3358b7eafff065a6b67258316b6c9cc11d792512b18baced5bd9d3276d04a6d8c40ee3e1756120e56e
- SSDEEP 49152:YNPFqKzT2bwZr1Rba/cllZRWqzd79VTu51rBmmWOZO9SEmBCp2BDseKECCJPpDrN:Y1fThmUv6qp7CtZNh7XZ
- TLSH T14BD5BF3176C8C43AE86711B2557C7625467CF8725B3242CF53C42E29AE38AD39E3A397
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
8/10
Behavioral task
behavioral1
Sample
2026-08-03_a13b2a607b317eb16cdbdb8da46eef65_amadey_elex_glassworm_redline-stealer_remcos_rhadamanthys_smoke-loader_stealc.exe
Resource
win10v2004-20260513-en
10 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-08-03_a13b2a607b317eb16cdbdb8da46eef65_amadey_elex_glassworm_redline-stealer_remcos_rhadamanthys_smoke-loader_stealc.exe
Resource
win11ltsc2024-20260709-en
10 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-08-03_a13b2a607b317eb16cdbdb8da46eef65_amadey_elex_glassworm_redline-stealer_remcos_rhadamanthys_smoke-loader_stealc
- Size 2.6MB
- SHA256 ab604817849846f13bf3b7456047932a59fcbdd6222378965764063fd3b56682
- MD5 a13b2a607b317eb16cdbdb8da46eef65
- SHA1 ae4c52824bf17e4e82705378f7aaa794a34ed50a
- SHA512 a72d55970a23359d66173fcb49bcadc4a8e8d00d07dfde3358b7eafff065a6b67258316b6c9cc11d792512b18baced5bd9d3276d04a6d8c40ee3e1756120e56e
- SSDEEP 49152:YNPFqKzT2bwZr1Rba/cllZRWqzd79VTu51rBmmWOZO9SEmBCp2BDseKECCJPpDrN:Y1fThmUv6qp7CtZNh7XZ
- TLSH T14BD5BF3176C8C43AE86711B2557C7625467CF8725B3242CF53C42E29AE38AD39E3A397
- MD5 SHA1 SHA512 SSDEEP TLSH
Score8/10-
Drops file in Drivers directory
-
Adds Run key to start application
-
Drops file in System32 directory