General
- Target 2026-08-08_8fc6197036b0f090704afe17ea429def_amadey_elex_glassworm_rhadamanthys_smoke-loader_stealc_stop_swisyn
- Size 814KB
- Sample260808-ythb1axzfv
- SHA256 1d687e4ceb9adab7ba85c8ed8a45c952f2cf11759157f068243e248744b89c8a
- MD5 8fc6197036b0f090704afe17ea429def
- SHA1 a4a1fb1d299b67ef491c409d00414cec43549f46
- SHA512 5f3fab282362fe29c6c9005577028ccdc2f794ce5381e6964aea8cfc2658acf4559e5cfabd8db0fa50a100cf050a555d3c70a56a3bf3cafcb42b934b473258dd
- SSDEEP 12288:PFUNDa0hQrGxxsgpjRZBHzYrJtGqBnAeKTRnii6U4LOO:PFOapGxxsgpjRZtzYttGqBn+TRn7g
- TLSH T18F059F07BA8180B7E46341B524B6937A6D37EE310729D9C377A539504F302E27E7E39A
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
10/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-08-08_8fc6197036b0f090704afe17ea429def_amadey_elex_glassworm_rhadamanthys_smoke-loader_stealc_stop_swisyn.exe
Resource
win10v2004-20260513-en
10 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-08-08_8fc6197036b0f090704afe17ea429def_amadey_elex_glassworm_rhadamanthys_smoke-loader_stealc_stop_swisyn.exe
Resource
win11ltsc2024-20260710-en
10 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-08-08_8fc6197036b0f090704afe17ea429def_amadey_elex_glassworm_rhadamanthys_smoke-loader_stealc_stop_swisyn
- Size 814KB
- SHA256 1d687e4ceb9adab7ba85c8ed8a45c952f2cf11759157f068243e248744b89c8a
- MD5 8fc6197036b0f090704afe17ea429def
- SHA1 a4a1fb1d299b67ef491c409d00414cec43549f46
- SHA512 5f3fab282362fe29c6c9005577028ccdc2f794ce5381e6964aea8cfc2658acf4559e5cfabd8db0fa50a100cf050a555d3c70a56a3bf3cafcb42b934b473258dd
- SSDEEP 12288:PFUNDa0hQrGxxsgpjRZBHzYrJtGqBnAeKTRnii6U4LOO:PFOapGxxsgpjRZtzYttGqBn+TRn7g
- TLSH T18F059F07BA8180B7E46341B524B6937A6D37EE310729D9C377A539504F302E27E7E39A
- MD5 SHA1 SHA512 SSDEEP TLSH
Score10/10-
Modifies visibility of hidden/system files in Explorer
-
Executes dropped EXE
-
Adds Run key to start application
-
Drops file in System32 directory