General
- Target 2026-08-13_955136fc78d2b882d77dea4b9dcd9379_amadey_elex_glassworm_hijackloader_rhadamanthys_stop
- Size 4.3MB
- Sample260813-sg1d6abl9w
- SHA256 efd0670f65c7f7ab4a89fbff4c8e65bd61eb3fe92f5a50e8b0b3f9d5e75b1fdf
- MD5 955136fc78d2b882d77dea4b9dcd9379
- SHA1 a99e1454c58b494b1773fea0b08bb01248f2c51c
- SHA512 0d11fb93a2192c6663bfa1d774ae9f86265712d5fdfdcd219400f0906a9b5b6acc1f33976b23501df4730b12923363594a852b225524652f003e5b88185bad94
- SSDEEP 49152:Dx4fD2eW4SkZP4sz9MbvT3S9tsgX8zEC8ULgCSA/Bkj0wqJtb2I6:7fkZcvTIOSAeL
- TLSH T150266D12B3F88727E0BA927EC0B1597DE771742B9B32C68F3104AA5D5D677828527323
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
10/10
Static task
static1
3 signatures
Behavioral task
behavioral1
Sample
2026-08-13_955136fc78d2b882d77dea4b9dcd9379_amadey_elex_glassworm_hijackloader_rhadamanthys_stop.exe
Resource
win10v2004-20260513-en
6 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-08-13_955136fc78d2b882d77dea4b9dcd9379_amadey_elex_glassworm_hijackloader_rhadamanthys_stop.exe
Resource
win11ltsc2024-20260709-en
6 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-08-13_955136fc78d2b882d77dea4b9dcd9379_amadey_elex_glassworm_hijackloader_rhadamanthys_stop
- Size 4.3MB
- SHA256 efd0670f65c7f7ab4a89fbff4c8e65bd61eb3fe92f5a50e8b0b3f9d5e75b1fdf
- MD5 955136fc78d2b882d77dea4b9dcd9379
- SHA1 a99e1454c58b494b1773fea0b08bb01248f2c51c
- SHA512 0d11fb93a2192c6663bfa1d774ae9f86265712d5fdfdcd219400f0906a9b5b6acc1f33976b23501df4730b12923363594a852b225524652f003e5b88185bad94
- SSDEEP 49152:Dx4fD2eW4SkZP4sz9MbvT3S9tsgX8zEC8ULgCSA/Bkj0wqJtb2I6:7fkZcvTIOSAeL
- TLSH T150266D12B3F88727E0BA927EC0B1597DE771742B9B32C68F3104AA5D5D677828527323
- MD5 SHA1 SHA512 SSDEEP TLSH
Score9/10-
Detects executables containing URLs to raw contents of a Github gist
-
Detects executables embedding registry key / value combination indicative of disabling Windows Defen
-
Drops file in System32 directory