General
- Target 2026-08-03_209208e3a2037686051d1426f7fba944_amadey_elex_glassworm_redline-stealer_remcos_rhadamanthys_smoke-loader_stealc
- Size 3.7MB
- Sample260804-drn2js1cph
- SHA256 7bc3f40f9ffe56af493c310a1e95e95646bc0e8faa7e6386d2ef7d396e06ce9a
- MD5 209208e3a2037686051d1426f7fba944
- SHA1 0e94170728b6c7fbc2491faa11d19f9e36124837
- SHA512 8bda31b7a37fa53de021a158bef8c03a2fb23a0e188188707372b2a5fde6ba674baa739e64a9beb810343f6a01010d4f1cb7584e77793849fe8e62907a0c7b56
- SSDEEP 49152:YNPFqKzT2bwZr1Rba/cllZRWqzd79VTu51rBmmWOZO9SEmBCp2BDseKECCJPpDru:Y1fThmUv6qp7CtZNh7XEpf
- TLSH T18406BF3176E8883AE4771072567C7620093DF87A4B3591CF63C45A5DAE36BC29A3A3D3
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
8/10
Behavioral task
behavioral1
Sample
2026-08-03_209208e3a2037686051d1426f7fba944_amadey_elex_glassworm_redline-stealer_remcos_rhadamanthys_smoke-loader_stealc.exe
Resource
win10v2004-20260513-en
8 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-08-03_209208e3a2037686051d1426f7fba944_amadey_elex_glassworm_redline-stealer_remcos_rhadamanthys_smoke-loader_stealc.exe
Resource
win11ltsc2024-20260709-en
10 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-08-03_209208e3a2037686051d1426f7fba944_amadey_elex_glassworm_redline-stealer_remcos_rhadamanthys_smoke-loader_stealc
- Size 3.7MB
- SHA256 7bc3f40f9ffe56af493c310a1e95e95646bc0e8faa7e6386d2ef7d396e06ce9a
- MD5 209208e3a2037686051d1426f7fba944
- SHA1 0e94170728b6c7fbc2491faa11d19f9e36124837
- SHA512 8bda31b7a37fa53de021a158bef8c03a2fb23a0e188188707372b2a5fde6ba674baa739e64a9beb810343f6a01010d4f1cb7584e77793849fe8e62907a0c7b56
- SSDEEP 49152:YNPFqKzT2bwZr1Rba/cllZRWqzd79VTu51rBmmWOZO9SEmBCp2BDseKECCJPpDru:Y1fThmUv6qp7CtZNh7XEpf
- TLSH T18406BF3176E8883AE4771072567C7620093DF87A4B3591CF63C45A5DAE36BC29A3A3D3
- MD5 SHA1 SHA512 SSDEEP TLSH
Score8/10-
Drops file in Drivers directory
-
Adds Run key to start application
-
Drops file in System32 directory