General
- Target 2026-08-13_9d5401a4438c178d05466cfa4e8653be_amadey_elex_glassworm_hijackloader_rhadamanthys_stop
- Size 4.3MB
- Sample260813-2cefkazcrb
- SHA256 3e4f913c91cc3bf1c6f856d8956cc57a99599e75e02946c8a2636956afaf3cdc
- MD5 9d5401a4438c178d05466cfa4e8653be
- SHA1 7813bd9fdf1d39d7715dc9ad7407d329f9b4f983
- SHA512 25a7ebdd4b724b29c9aca7f7b7a2518321dc89744208ccd371aa16863818ded19ad3b34c199f4372f45638f3226d3e0a53a743a7adf9baed94b5ef49dd644c35
- SSDEEP 49152:Dx4fD2eW4SkZP4sz9MbyqJtb2ImT3S9tsgX8zEC8ULgCSA/Bkj0l:7fkZcyRTIOSA7
- TLSH T163266C12B2F88727E0BA927EC0B15A7DE771742B9B32C68F3104B65D5D677828527323
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
10/10
Static task
static1
3 signatures
Behavioral task
behavioral1
Sample
2026-08-13_9d5401a4438c178d05466cfa4e8653be_amadey_elex_glassworm_hijackloader_rhadamanthys_stop.exe
Resource
win10v2004-20260513-en
6 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-08-13_9d5401a4438c178d05466cfa4e8653be_amadey_elex_glassworm_hijackloader_rhadamanthys_stop.exe
Resource
win11ltsc2024-20260709-en
6 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-08-13_9d5401a4438c178d05466cfa4e8653be_amadey_elex_glassworm_hijackloader_rhadamanthys_stop
- Size 4.3MB
- SHA256 3e4f913c91cc3bf1c6f856d8956cc57a99599e75e02946c8a2636956afaf3cdc
- MD5 9d5401a4438c178d05466cfa4e8653be
- SHA1 7813bd9fdf1d39d7715dc9ad7407d329f9b4f983
- SHA512 25a7ebdd4b724b29c9aca7f7b7a2518321dc89744208ccd371aa16863818ded19ad3b34c199f4372f45638f3226d3e0a53a743a7adf9baed94b5ef49dd644c35
- SSDEEP 49152:Dx4fD2eW4SkZP4sz9MbyqJtb2ImT3S9tsgX8zEC8ULgCSA/Bkj0l:7fkZcyRTIOSA7
- TLSH T163266C12B2F88727E0BA927EC0B15A7DE771742B9B32C68F3104B65D5D677828527323
- MD5 SHA1 SHA512 SSDEEP TLSH
Score9/10-
Detects executables containing URLs to raw contents of a Github gist
-
Detects executables embedding registry key / value combination indicative of disabling Windows Defen
-
Drops file in System32 directory