General
- Target 2026-08-05_50d208d440ed4d8c0c043705d9e4ddd3_amadey_elex_glassworm_njrat_rhadamanthys_smoke-loader_stop
- Size 1.7MB
- Sample260805-m92j2ael91
- SHA256 f2205f6db2ee9e9ee5d87676e1304ad2c14aa609cfd8a76ba45b9551e8502138
- MD5 50d208d440ed4d8c0c043705d9e4ddd3
- SHA1 39d8521b9d9e85b492e45314a185d25a9a252266
- SHA512 246b62cc2c802200c175a56fe755c0e7c598bda342e4ef723776d40fd457cbd1c41c3355aac4b1e0ef927ec4e36e80eb0bdb8cc0ee140d14f205fcdefa0b4ee4
- SSDEEP 12288:L7dL4AZ0U9gY2F/eyL1Jer5+ngA1YaL8i0DMUNLtG4+tbQIzKYZLwTmer5+nIUeA:L7dLBeU9g16AVDKUTbQIzFLwra
- TLSH T1BF850753EB814AE8E75D09365B544150D62EFE21AA4F2350786C720CCFA738B8F66E3D
- MD5 SHA1 SHA512 SSDEEP TLSH
Behavioral task
behavioral1
Sample
2026-08-05_50d208d440ed4d8c0c043705d9e4ddd3_amadey_elex_glassworm_njrat_rhadamanthys_smoke-loader_stop.exe
Resource
win10v2004-20260513-en
9 signatures
150 seconds
Malware Config
Extracted
Family
-
urelas
C2
-
218.54.31.165
-
218.54.31.226
Targets
-
- Target 2026-08-05_50d208d440ed4d8c0c043705d9e4ddd3_amadey_elex_glassworm_njrat_rhadamanthys_smoke-loader_stop
- Size 1.7MB
- SHA256 f2205f6db2ee9e9ee5d87676e1304ad2c14aa609cfd8a76ba45b9551e8502138
- MD5 50d208d440ed4d8c0c043705d9e4ddd3
- SHA1 39d8521b9d9e85b492e45314a185d25a9a252266
- SHA512 246b62cc2c802200c175a56fe755c0e7c598bda342e4ef723776d40fd457cbd1c41c3355aac4b1e0ef927ec4e36e80eb0bdb8cc0ee140d14f205fcdefa0b4ee4
- SSDEEP 12288:L7dL4AZ0U9gY2F/eyL1Jer5+ngA1YaL8i0DMUNLtG4+tbQIzKYZLwTmer5+nIUeA:L7dLBeU9g16AVDKUTbQIzFLwra
- TLSH T1BF850753EB814AE8E75D09365B544150D62EFE21AA4F2350786C720CCFA738B8F66E3D
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Executes dropped EXE