General
- Target 2026-08-07_ce306d7689589cc94b27dff2f15d5adc_amadey_elex_glassworm_njrat_rhadamanthys_smoke-loader_stealc_stop_tofsee
- Size 1.4MB
- Sample260807-lt91ssbm7z
- SHA256 37db378a704b2ad7c1c4c4952cb7240b48cae5666e31f420ddcef692779e53eb
- MD5 ce306d7689589cc94b27dff2f15d5adc
- SHA1 8359ab58ddedbb4be1828d5eb6db19bf34083307
- SHA512 5fe3319a54d848ca792f8ef5936f6eb40af4a1b9dd9f6f0133a9e5ad1040a06a418338a074020058ea73397b4212680e2d81418ba70b37a6db80441cb33a13cb
- SSDEEP 12288:AIfBoDWoyFblU6hAJQnOzer5+nZoWL1rA1YaL8i0DM8:AIfjoga6u1AVD8
- TLSH T13965D557EB814AE8E75D09365B588150D62EFE215A4F2350B46C721CCFA338B8F62E3D
- MD5 SHA1 SHA512 SSDEEP TLSH
Behavioral task
behavioral1
Sample
2026-08-07_ce306d7689589cc94b27dff2f15d5adc_amadey_elex_glassworm_njrat_rhadamanthys_smoke-loader_stealc_stop_tofsee.exe
Resource
win10v2004-20260513-en
8 signatures
150 seconds
Malware Config
Extracted
Family
-
urelas
C2
-
218.54.31.165
-
218.54.31.226
Targets
-
- Target 2026-08-07_ce306d7689589cc94b27dff2f15d5adc_amadey_elex_glassworm_njrat_rhadamanthys_smoke-loader_stealc_stop_tofsee
- Size 1.4MB
- SHA256 37db378a704b2ad7c1c4c4952cb7240b48cae5666e31f420ddcef692779e53eb
- MD5 ce306d7689589cc94b27dff2f15d5adc
- SHA1 8359ab58ddedbb4be1828d5eb6db19bf34083307
- SHA512 5fe3319a54d848ca792f8ef5936f6eb40af4a1b9dd9f6f0133a9e5ad1040a06a418338a074020058ea73397b4212680e2d81418ba70b37a6db80441cb33a13cb
- SSDEEP 12288:AIfBoDWoyFblU6hAJQnOzer5+nZoWL1rA1YaL8i0DM8:AIfjoga6u1AVD8
- TLSH T13965D557EB814AE8E75D09365B588150D62EFE215A4F2350B46C721CCFA338B8F62E3D
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Executes dropped EXE