General
- Target 2026-08-09_61ada112999730e3fe3a9aa2c7b4f2df_amadey_elex_glassworm_njrat_rhadamanthys_smoke-loader_stealc_stop_tofsee
- Size 1.6MB
- Sample260809-hk611abj6s
- SHA256 83b02d3266a82b0e3e85aa622f9ba2d934686a7a62b1db54fa55547b9fab244a
- MD5 61ada112999730e3fe3a9aa2c7b4f2df
- SHA1 97f61fa8e79b81583ecfd3c1568f2c9d064701dd
- SHA512 fcf31ac4dc084eceb4fe82a82d1e4b398a767326652b8356af52eca7cd3a0bf37ccaa46a9295fae7dd7f6fd894b27d06ffdf8c9b5dc6291e097cea7f650815b2
- SSDEEP 12288:UIfBoDWoyFblU6hAJQnOzer5+nILwA1YaL8i0DMUNLtG4+tbQIzKYZLwLaYJOXeK:UIfjoga66AVDKUTbQIzFLwLK
- TLSH T127850757EB814AE8E35D09365B588150D62EFE21A64F2350B46C721CCFA33878F66E3D
- MD5 SHA1 SHA512 SSDEEP TLSH
Behavioral task
behavioral1
Sample
2026-08-09_61ada112999730e3fe3a9aa2c7b4f2df_amadey_elex_glassworm_njrat_rhadamanthys_smoke-loader_stealc_stop_tofsee.exe
Resource
win10v2004-20260513-en
8 signatures
150 seconds
Malware Config
Extracted
Family
-
urelas
C2
-
218.54.31.165
-
218.54.31.226
Targets
-
- Target 2026-08-09_61ada112999730e3fe3a9aa2c7b4f2df_amadey_elex_glassworm_njrat_rhadamanthys_smoke-loader_stealc_stop_tofsee
- Size 1.6MB
- SHA256 83b02d3266a82b0e3e85aa622f9ba2d934686a7a62b1db54fa55547b9fab244a
- MD5 61ada112999730e3fe3a9aa2c7b4f2df
- SHA1 97f61fa8e79b81583ecfd3c1568f2c9d064701dd
- SHA512 fcf31ac4dc084eceb4fe82a82d1e4b398a767326652b8356af52eca7cd3a0bf37ccaa46a9295fae7dd7f6fd894b27d06ffdf8c9b5dc6291e097cea7f650815b2
- SSDEEP 12288:UIfBoDWoyFblU6hAJQnOzer5+nILwA1YaL8i0DMUNLtG4+tbQIzKYZLwLaYJOXeK:UIfjoga66AVDKUTbQIzFLwLK
- TLSH T127850757EB814AE8E35D09365B588150D62EFE21A64F2350B46C721CCFA33878F66E3D
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Executes dropped EXE