General
- Target 2026-08-09_5dd655d8d48d249722c53d3dda81ac28_amadey_elex_glassworm_njrat_rhadamanthys_smoke-loader_stealc_stop_tofsee
- Size 1.6MB
- Sample260809-hlmczssfkd
- SHA256 c14251e699652c214ac66ec2bd6827e1cae6086db684bd083acd628ac0e3a846
- MD5 5dd655d8d48d249722c53d3dda81ac28
- SHA1 b8045b66c434b6af7c0bb74d20cc3667a327b013
- SHA512 61971e1c83cd665ea72027fbd0ff33f919133ed7a5182f620a5e0eb1d994ad2e1e4fa2464b9c4354359432162035a14b8b534535797ebe94bab1618352122b39
- SSDEEP 12288:UIfBoDWoyFblU6hAJQnOzer5+nILwA1YaL8i0DMUNLtG4+tbQIzKYZLwLaYJOXea:UIfjoga66AVDKUTbQIzFLwLa
- TLSH T1CE850757EB814AE8E35D09365B588150D62EFE21A64F2350B46C721CCFA33878F66E3D
- MD5 SHA1 SHA512 SSDEEP TLSH
Behavioral task
behavioral1
Sample
2026-08-09_5dd655d8d48d249722c53d3dda81ac28_amadey_elex_glassworm_njrat_rhadamanthys_smoke-loader_stealc_stop_tofsee.exe
Resource
win10v2004-20260513-en
8 signatures
150 seconds
Malware Config
Extracted
Family
-
urelas
C2
-
218.54.31.165
-
218.54.31.226
Targets
-
- Target 2026-08-09_5dd655d8d48d249722c53d3dda81ac28_amadey_elex_glassworm_njrat_rhadamanthys_smoke-loader_stealc_stop_tofsee
- Size 1.6MB
- SHA256 c14251e699652c214ac66ec2bd6827e1cae6086db684bd083acd628ac0e3a846
- MD5 5dd655d8d48d249722c53d3dda81ac28
- SHA1 b8045b66c434b6af7c0bb74d20cc3667a327b013
- SHA512 61971e1c83cd665ea72027fbd0ff33f919133ed7a5182f620a5e0eb1d994ad2e1e4fa2464b9c4354359432162035a14b8b534535797ebe94bab1618352122b39
- SSDEEP 12288:UIfBoDWoyFblU6hAJQnOzer5+nILwA1YaL8i0DMUNLtG4+tbQIzKYZLwLaYJOXea:UIfjoga66AVDKUTbQIzFLwLa
- TLSH T1CE850757EB814AE8E35D09365B588150D62EFE21A64F2350B46C721CCFA33878F66E3D
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Executes dropped EXE