General
- Target 2026-08-13_099247f1eb99a7ea9877c250005ed3de_amadey_elex_glassworm_hijackloader_rhadamanthys_stop
- Size 4.2MB
- Sample260813-s248vaswet
- SHA256 02ea9b11c31baaad2dcdd94894a0359dcfc2117e93e2316e88d5ee240615dd4c
- MD5 099247f1eb99a7ea9877c250005ed3de
- SHA1 2f8361df19e7e2155da3206d49f988a7b391ef75
- SHA512 1b971fc1a64344ca37c8b329a6e31ca46d135165170704fd3323f3ae0e1419b2714cfece30b37ff3e5de3a28b6d3ea428aa5e3b54be8b4dd7408832ef2252a58
- SSDEEP 49152:Dx4fD2eW4SkZP4sz9MbvT3S9tsgX8zEC8ULgCSA/Bkj0opYqt:7fkZcvTIOSAy6C
- TLSH T108266C12B3F88637E0BA927EC0B15A7DE771742B9B32C78F3104A95D5D677828526323
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
10/10
Static task
static1
3 signatures
Behavioral task
behavioral1
Sample
2026-08-13_099247f1eb99a7ea9877c250005ed3de_amadey_elex_glassworm_hijackloader_rhadamanthys_stop.exe
Resource
win10v2004-20260513-en
6 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-08-13_099247f1eb99a7ea9877c250005ed3de_amadey_elex_glassworm_hijackloader_rhadamanthys_stop.exe
Resource
win11ltsc2024-20260710-en
6 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-08-13_099247f1eb99a7ea9877c250005ed3de_amadey_elex_glassworm_hijackloader_rhadamanthys_stop
- Size 4.2MB
- SHA256 02ea9b11c31baaad2dcdd94894a0359dcfc2117e93e2316e88d5ee240615dd4c
- MD5 099247f1eb99a7ea9877c250005ed3de
- SHA1 2f8361df19e7e2155da3206d49f988a7b391ef75
- SHA512 1b971fc1a64344ca37c8b329a6e31ca46d135165170704fd3323f3ae0e1419b2714cfece30b37ff3e5de3a28b6d3ea428aa5e3b54be8b4dd7408832ef2252a58
- SSDEEP 49152:Dx4fD2eW4SkZP4sz9MbvT3S9tsgX8zEC8ULgCSA/Bkj0opYqt:7fkZcvTIOSAy6C
- TLSH T108266C12B3F88637E0BA927EC0B15A7DE771742B9B32C78F3104A95D5D677828526323
- MD5 SHA1 SHA512 SSDEEP TLSH
Score9/10-
Detects executables containing URLs to raw contents of a Github gist
-
Detects executables embedding registry key / value combination indicative of disabling Windows Defen
-
Drops file in System32 directory