2026-08-09_5c265338e6ead6cc0ec4aae9509e0b68_amadey_elex_glassworm_manuscrypt_njrat_rhadamanthys_smoke-loader_stop

Sharing

Copy URL Twitter E-mail

General

Target
2026-08-09_5c265338e6ead6cc0ec4aae9509e0b68_amadey_elex_glassworm_manuscrypt_njrat_rhadamanthys_smoke-loader_stop
Size 1.4MB
Sample260809-t983faal6z
SHA256 854ed17f7b14fda0549d3300ea261f8541326ff1f74a0b5815266eb84198d9f3
MD5 5c265338e6ead6cc0ec4aae9509e0b68
SHA1 84499ff1d8a61336bc5ed90de3c56dd3ea427aed
SHA512 924f7082ea01d9995aeb6542af90a1bbee8de55796c5ad13eb4377e4c96c2e315eaae4d001a513e27e29e38ef1073f7f32fef42971d252ceff94598a86d223c0
SSDEEP 24576:0LueEKR72qKoe9en2zwGngoruwRLE2PPgBfe3QKVZqXX0Rlc7Trbuc:0LueVIqKoeEA5TQIZqF7T/uc
TLSH
T1AA658C4B7FA4C8E1D46605B129E186806B76FCB69E60D3073A8D232EDF532D04D3677A
MD5 SHA1 SHA512 SSDEEP TLSH

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
2026-08-09_5c265338e6ead6cc0ec4aae9509e0b68_amadey_elex_glassworm_manuscrypt_njrat_rhadamanthys_smoke-loader_stop

File Explorer

2026-08-09_5c265338e6ead6cc0ec4aae9509e0b68_amadey_elex_glassworm_manuscrypt_njrat_rhadamanthys_smoke-loader_stop

.exe 1.4MB

2026-08-09_5c265338e6ead6cc0ec4aae9509e0b68_amadey_elex_glassworm_manuscrypt_njrat_rhadamanthys_smoke-loader_stop

IMPHASH 57028ef616fca41d6bb967ca1cb3c836
SHA256 854ed17f7b14fda0549d3300ea261f8541326ff1f74a0b5815266eb84198d9f3
MD5 5c265338e6ead6cc0ec4aae9509e0b68
SHA1 84499ff1d8a61336bc5ed90de3c56dd3ea427aed
SHA512 924f7082ea01d9995aeb6542af90a1bbee8de55796c5ad13eb4377e4c96c2e315eaae4d001a513e27e29e38ef1073f7f32fef42971d252ceff94598a86d223c0
SSDEEP 24576:0LueEKR72qKoe9en2zwGngoruwRLE2PPgBfe3QKVZqXX0Rlc7Trbuc:0LueVIqKoeEA5TQIZqF7T/uc
TLSH
T1AA658C4B7FA4C8E1D46605B129E186806B76FCB69E60D3073A8D232EDF532D04D3677A
MD5 SHA1 SHA512 SSDEEP TLSH

windows:5 windows x86 arch:x86

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

Major OS version

Entry point

20312

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths

kernel32

GetCurrencyFormatA GetConsoleCP GetLastError VirtualAlloc OutputDebugStringA GetWindowsDirectoryW GetVersion VirtualFree ReadFile FlushFileBuffers WriteConsoleW SetStdHandle LoadLibraryW GetTickCount GetCurrentProcessId GetCommandLineW DeleteCriticalSection HeapSetInformation GetStartupInfoW RaiseException DecodePointer UnhandledExceptionFilter SetUnhandledExceptionFilter IsDebuggerPresent EncodePointer TerminateProcess GetCurrentProcess HeapAlloc HeapFree IsProcessorFeaturePresent EnterCriticalSection LeaveCriticalSection InitializeCriticalSectionAndSpinCount GetCPInfo InterlockedIncrement InterlockedDecrement GetACP GetOEMCP IsValidCodePage TlsAlloc TlsGetValue TlsSetValue TlsFree GetModuleHandleW SetLastError GetCurrentThreadId GetProcAddress WideCharToMultiByte LCMapStringW MultiByteToWideChar Sleep GetFileAttributesW ExitProcess WriteFile GetStdHandle GetModuleFileNameW FreeEnvironmentStringsW GetEnvironmentStringsW SetHandleCount GetFileType HeapCreate QueryPerformanceCounter GetSystemTimeAsFileTime SetFilePointer GetConsoleMode RtlUnwind CloseHandle GetStringTypeW HeapReAlloc HeapSize CreateFileW

user32

IsZoomed GetDesktopWindow GetCursorPos GetMessageTime GetWindowTextLengthW

advapi32

RegOpenKeyExW GetCurrentHwProfileW

Name

.text

Size

59KB

Virtual Size

58KB

Characteristics

IMAGE_SCN_CNT_CODE IMAGE_SCN_MEM_EXECUTE IMAGE_SCN_MEM_READ

Name

.rdata

Size

13KB

Virtual Size

12KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.data

Size

4KB

Virtual Size

12KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.rsrc

Size

487KB

Virtual Size

486KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

hrPyVqSG

Size

1024B

Virtual Size

671B

Characteristics

Name

TJVubZwJ

Size

16KB

Virtual Size

15KB

Characteristics

Name

UCxNVGyC

Size

3KB

Virtual Size

2KB

Characteristics

Name

QdQfhwgz

Size

1024B

Virtual Size

535B

Characteristics

Name

gFHjEkmd

Size

6KB

Virtual Size

6KB

Characteristics

Name

JQTytLAc

Size

8KB

Virtual Size

7KB

Characteristics

Name

OPIvqoSx

Size

5KB

Virtual Size

4KB

Characteristics

Name

sqhJNiHo

Size

1KB

Virtual Size

1KB

Characteristics

Name

oAZyrgVz

Size

4KB

Virtual Size

3KB

Characteristics

Name

xksotGpB

Size

2KB

Virtual Size

2KB

Characteristics

Name

lhIDreEE

Size

512B

Virtual Size

16B

Characteristics

Name

HZarDovb

Size

3KB

Virtual Size

2KB

Characteristics

Name

tqEKjPoG

Size

125KB

Virtual Size

125KB

Characteristics

Name

xwpSFEix

Size

2KB

Virtual Size

2KB

Characteristics

Name

zrSPyjtZ

Size

1KB

Virtual Size

1KB

Characteristics

Name

vBHECcQV

Size

2KB

Virtual Size

2KB

Characteristics

Name

MqrTWZQy

Size

2KB

Virtual Size

2KB

Characteristics

Name

KwmtlYPm

Size

512B

Virtual Size

205B

Characteristics

Name

xcxmiUSj

Size

6KB

Virtual Size

6KB

Characteristics

Name

ITkaQtse

Size

512B

Virtual Size

409B

Characteristics

Name

KvaXkkOn

Size

2KB

Virtual Size

2KB

Characteristics

Name

nEtRrcWq

Size

82KB

Virtual Size

81KB

Characteristics

Name

CeWXkMjt

Size

5KB

Virtual Size

4KB

Characteristics

Name

zlAaZGeg

Size

1024B

Virtual Size

954B

Characteristics

Name

sufFEipW

Size

16KB

Virtual Size

15KB

Characteristics

Name

yHydyesi

Size

6KB

Virtual Size

6KB

Characteristics

Name

MtHDkuKz

Size

21KB

Virtual Size

20KB

Characteristics

Name

beutGgNS

Size

2KB

Virtual Size

2KB

Characteristics

Name

JqzbCOiG

Size

3KB

Virtual Size

3KB

Characteristics

Name

xAMXDxOV

Size

512B

Virtual Size

324B

Characteristics

Name

PkKezQLT

Size

4KB

Virtual Size

3KB

Characteristics

Name

hrDGVlpb

Size

1024B

Virtual Size

680B

Characteristics

Name

kvtxPVVZ

Size

2KB

Virtual Size

1KB

Characteristics

Name

DSFZGXIi

Size

512B

Virtual Size

210B

Characteristics

Name

ZypcfCjp

Size

4KB

Virtual Size

4KB

Characteristics

Name

BfnHljFK

Size

512B

Virtual Size

357B

Characteristics

Name

bBBRqwOK

Size

6KB

Virtual Size

5KB

Characteristics

Name

dEqhaorO

Size

512B

Virtual Size

164B

Characteristics

Name

AJCEcUXa

Size

1KB

Virtual Size

1KB

Characteristics

Name

wrsXvUQQ

Size

2KB

Virtual Size

2KB

Characteristics

Name

EixUptFC

Size

6KB

Virtual Size

5KB

Characteristics

Name

yosCRLeN

Size

2KB

Virtual Size

1KB

Characteristics

Name

qeIhvUHs

Size

26KB

Virtual Size

26KB

Characteristics

Name

MWkQPaWV

Size

6KB

Virtual Size

6KB

Characteristics

Name

GLDToPEK

Size

1024B

Virtual Size

677B

Characteristics

Name

izyXfpWU

Size

1024B

Virtual Size

677B

Characteristics

Name

sVDiysIz

Size

512B

Virtual Size

171B

Characteristics

Name

OHXCasBr

Size

17KB

Virtual Size

17KB

Characteristics

Name

oWShVuMJ

Size

8KB

Virtual Size

8KB

Characteristics

Name

onDAcnjb

Size

1024B

Virtual Size

737B

Characteristics

Name

SQFAEapZ

Size

2KB

Virtual Size

1KB

Characteristics

Name

vBVOCzLf

Size

4KB

Virtual Size

3KB

Characteristics

Name

xfkplWWQ

Size

27KB

Virtual Size

26KB

Characteristics

Name

ggNSqbhD

Size

14KB

Virtual Size

13KB

Characteristics

Name

wTpPXbwX

Size

8KB

Virtual Size

8KB

Characteristics

Name

XHeGWDkp

Size

62KB

Virtual Size

61KB

Characteristics

Name

aSysWviv

Size

6KB

Virtual Size

5KB

Characteristics

Name

lTtXAcso

Size

4KB

Virtual Size

4KB

Characteristics

Name

yiZOuEUQ

Size

4KB

Virtual Size

3KB

Characteristics

Name

ruLRukUw

Size

54KB

Virtual Size

53KB

Characteristics

Name

nkMJncIa

Size

72KB

Virtual Size

71KB

Characteristics

Name

wnQuCNWR

Size

10KB

Virtual Size

9KB

Characteristics

Name

hBcWjFlR

Size

3KB

Virtual Size

2KB

Characteristics

Name

PaZGDihg

Size

1024B

Virtual Size

812B

Characteristics

Name

SurojCZK

Size

2KB

Virtual Size

2KB

Characteristics

Name

LOFfrgGU

Size

33KB

Virtual Size

32KB

Characteristics

Name

JFGyRpoN

Size

512B

Virtual Size

506B

Characteristics

Name

jyHFJntR

Size

2KB

Virtual Size

1KB

Characteristics

Name

KRvtcVFz

Size

5KB

Virtual Size

5KB

Characteristics

Name

NtuAqykI

Size

5KB

Virtual Size

5KB

Characteristics

Name

HRpWMGgF

Size

3KB

Virtual Size

3KB

Characteristics

Name

xHSabUZb

Size

12KB

Virtual Size

11KB

Characteristics

Name

CTYQgVIP

Size

5KB

Virtual Size

4KB

Characteristics

Name

hrvDJXYE

Size

29KB

Virtual Size

29KB

Characteristics

Name

dzYbVEaH

Size

512B

Virtual Size

31B

Characteristics

Sharing

General

Malware Config

Signatures

File Explorer

2026-08-09_5c265338e6ead6cc0ec4aae9509e0b68_amadey_elex_glassworm_manuscrypt_njrat_rhadamanthys_smoke-loader_stop

kernel32

user32

advapi32

generic