Analysis
- max time kernel
148s - max time network
142s - platform
windows11-ltsc_2024_x64 - resource
win11ltsc2024-20260709-en - resource tags
arch:x64arch:x86image:win11ltsc2024-20260709-enlocale:en-usos:windows11-ltsc_2024-x64systemwindows - submitted
10/08/2026, 01:01
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-08-10_288327f9394b2e7008f6f235da041e62_elex_glassworm_rhadamanthys_smoke-loader_stop.exe
Resource
win10v2004-20260513-en
1 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-08-10_288327f9394b2e7008f6f235da041e62_elex_glassworm_rhadamanthys_smoke-loader_stop.exe
Resource
win11ltsc2024-20260709-en
1 signatures
150 seconds
General
- Target 2026-08-10_288327f9394b2e7008f6f235da041e62_elex_glassworm_rhadamanthys_smoke-loader_stop.exe
- Size 1.8MB
- Sample260810-bda7esstby
- SHA256 75352962b4b4966692a0ad92f5f19c0d7ae3c7635e193f7ebf841e4139d79da3
- MD5 288327f9394b2e7008f6f235da041e62
- SHA1 2d93bcc1db6c6199b16d066bca6f1f2b790e1e92
- SHA512 747fc8915b1b28a65061c7eaac67bb7f1026d6300322c7fa0c9af35632b99f226ed0d2819cbc620560e1dbc78147139a47fc224323e1f538dd95d1466449fb96
- SSDEEP 49152:g3DqFO33qBV80Jsv6tWKFdu9C2Twu/LyvL/6mShMZtmjNUVrciV5P+7QVg07qJ/7:oDqF43S80Jsv6tWKFdu9C
- TLSH T1E6957C00A7E641B7F6F75A7555BF922A863BBE22473191DF12CC790A69303E09A37703
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
3/10
Malware Config
Signatures
- System Location Discovery: System Language Discovery 1 TTPs 1 IoCs
Attempt gather information about the system language of a victim in order to infer the geographical location of that host.
description ioc Process Key opened \REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language 2026-08-10_288327f9394b2e7008f6f235da041e62_elex_glassworm_rhadamanthys_smoke-loader_stop.exe
Processes
-
C:\Users\Admin\AppData\Local\Temp\2026-08-10_288327f9394b2e7008f6f235da041e62_elex_glassworm_rhadamanthys_smoke-loader_stop.exe"C:\Users\Admin\AppData\Local\Temp\2026-08-10_288327f9394b2e7008f6f235da041e62_elex_glassworm_rhadamanthys_smoke-loader_stop.exe"1⤵
- System Location Discovery: System Language Discovery
PID:4980