2026-08-05_307e8dedb44da46b849c5bf2d98b02a8_amadey_elex_glassworm_rhadamanthys_smoke-loader_stealc_stop_tofsee

General

Target
2026-08-05_307e8dedb44da46b849c5bf2d98b02a8_amadey_elex_glassworm_rhadamanthys_smoke-loader_stealc_stop_tofsee
Size 3.9MB
Sample260805-hxesaafe28
SHA256 422584a029922d87adc9ec370bba1fbb88c42c97ff087975d2bab359bfc433ad
MD5 307e8dedb44da46b849c5bf2d98b02a8
SHA1 2f2f8e5417719416b49028a349d0e9c05b386c36
SHA512 8865397f3f012167325dcb43388ed7b59e8b069777940800ef126c35a5bfc287d129d14bf5a1feed482b8dd85c956ded9fa3bad48669f00e00e83b7b40030fc9
SSDEEP 98304:01LMyZyHfiOxhRmaKZMoFfSbqgGEGPfx1cd2HAFeqabxJsbmXJy:01LVZEiO0fFspAPcUAYqwnsbm
TLSH
T18916334E71D4D4B6D016003258F1C3794A3B55732729EACBABDC2C377FA23A593B8686
MD5 SHA1 SHA512 SSDEEP TLSH

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
2026-08-05_307e8dedb44da46b849c5bf2d98b02a8_amadey_elex_glassworm_rhadamanthys_smoke-loader_stealc_stop_tofsee

File Explorer

2026-08-05_307e8dedb44da46b849c5bf2d98b02a8_amadey_elex_glassworm_rhadamanthys_smoke-loader_stealc_stop_tofsee

.exe 3.9MB

2026-08-05_307e8dedb44da46b849c5bf2d98b02a8_amadey_elex_glassworm_rhadamanthys_smoke-loader_stealc_stop_tofsee

IMPHASH b87afca7a1175b7eb49b7c1eb6d58adf
SHA256 422584a029922d87adc9ec370bba1fbb88c42c97ff087975d2bab359bfc433ad
MD5 307e8dedb44da46b849c5bf2d98b02a8
SHA1 2f2f8e5417719416b49028a349d0e9c05b386c36
SHA512 8865397f3f012167325dcb43388ed7b59e8b069777940800ef126c35a5bfc287d129d14bf5a1feed482b8dd85c956ded9fa3bad48669f00e00e83b7b40030fc9
SSDEEP 98304:01LMyZyHfiOxhRmaKZMoFfSbqgGEGPfx1cd2HAFeqabxJsbmXJy:01LVZEiO0fFspAPcUAYqwnsbm
TLSH
T18916334E71D4D4B6D016003258F1C3794A3B55732729EACBABDC2C377FA23A593B8686
MD5 SHA1 SHA512 SSDEEP TLSH

windows:5 windows x86 arch:x86

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

0

Major OS version

5

Entry point

45815

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_CUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths

kernel32

GetLastError GetModuleHandleA ExpandEnvironmentStringsA GetEnvironmentVariableA SetEnvironmentVariableA GetShortPathNameW GetTempPathW Sleep LoadLibraryExA GetExitCodeProcess WaitForSingleObject CreateProcessW GetCommandLineW GetStartupInfoW GetProcAddress WriteConsoleA SetConsoleTextAttribute GetStdHandle VirtualFree VirtualAlloc GetModuleFileNameW GetVersionExA LoadLibraryA GetProcessHeap SetEndOfFile FindClose FileTimeToSystemTime FileTimeToLocalFileTime GetDriveTypeA FindFirstFileA HeapFree HeapAlloc EnterCriticalSection LeaveCriticalSection CreateDirectoryA GetCurrentProcessId DeleteFileA RemoveDirectoryA FindNextFileA SetStdHandle GetFileType SetConsoleCtrlHandler GetModuleHandleW ExitProcess HeapReAlloc GetFullPathNameA GetFileAttributesA GetCommandLineA GetCurrentDirectoryA TerminateProcess GetCurrentProcess UnhandledExceptionFilter SetUnhandledExceptionFilter IsDebuggerPresent TlsGetValue TlsAlloc TlsSetValue TlsFree InterlockedIncrement SetLastError GetCurrentThreadId InterlockedDecrement HeapCreate DeleteCriticalSection WriteFile GetModuleFileNameA SetHandleCount GetStartupInfoA RtlUnwind CloseHandle WideCharToMultiByte GetConsoleCP GetConsoleMode MultiByteToWideChar ReadFile InitializeCriticalSectionAndSpinCount SetFilePointer GetCPInfo GetACP GetOEMCP IsValidCodePage LCMapStringA LCMapStringW FreeEnvironmentStringsA GetEnvironmentStrings FreeEnvironmentStringsW GetEnvironmentStringsW QueryPerformanceCounter GetTickCount GetSystemTimeAsFileTime GetTimeZoneInformation FlushFileBuffers CreateFileW GetConsoleOutputCP WriteConsoleW GetStringTypeA GetStringTypeW GetLocaleInfoA HeapSize CreateFileA CompareStringA CompareStringW RaiseException

ws2_32

ntohl

Sharing

General

Malware Config

Signatures

File Explorer

2026-08-05_307e8dedb44da46b849c5bf2d98b02a8_amadey_elex_glassworm_rhadamanthys_smoke-loader_stealc_stop_tofsee

kernel32

ws2_32

generic