General
- Target 2026-08-16_a7cbceb30bec402ebbd0e98dab3a8082_amadey_elex_glassworm_hijackloader_rhadamanthys_stop
- Size 4.4MB
- Sample260816-ced55sxelf
- SHA256 0ae5af092bddfe5104d8298c842a08c3132b1e93d5c2f5dcab6feb528a08066f
- MD5 a7cbceb30bec402ebbd0e98dab3a8082
- SHA1 6b179e6c2b797dba7731c9e99d449dea5fae9f10
- SHA512 2e9cbadebbea578060c9628516622d37ad4ad80ee18543ae75f355e38a0082f5782fbc9983750892f9c6bf3d9b6929fd82e05b04448ec1e1c96b89577de2c837
- SSDEEP 49152:Dx4fD2eW4SkZP4sz9MbJT3S9tsgX8zEC8ULgCSA/Bkj0fqJtb2IT:7fkZcJTIOSA9i
- TLSH T1DB266D16B3F88727E0BA927EC0B1597DE771342B9B32C68F3104AA5D5D677828527323
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
10/10
Static task
static1
3 signatures
Behavioral task
behavioral1
Sample
2026-08-16_a7cbceb30bec402ebbd0e98dab3a8082_amadey_elex_glassworm_hijackloader_rhadamanthys_stop.exe
Resource
win10v2004-20260513-en
6 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-08-16_a7cbceb30bec402ebbd0e98dab3a8082_amadey_elex_glassworm_hijackloader_rhadamanthys_stop.exe
Resource
win11ltsc2024-20260709-en
6 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-08-16_a7cbceb30bec402ebbd0e98dab3a8082_amadey_elex_glassworm_hijackloader_rhadamanthys_stop
- Size 4.4MB
- SHA256 0ae5af092bddfe5104d8298c842a08c3132b1e93d5c2f5dcab6feb528a08066f
- MD5 a7cbceb30bec402ebbd0e98dab3a8082
- SHA1 6b179e6c2b797dba7731c9e99d449dea5fae9f10
- SHA512 2e9cbadebbea578060c9628516622d37ad4ad80ee18543ae75f355e38a0082f5782fbc9983750892f9c6bf3d9b6929fd82e05b04448ec1e1c96b89577de2c837
- SSDEEP 49152:Dx4fD2eW4SkZP4sz9MbJT3S9tsgX8zEC8ULgCSA/Bkj0fqJtb2IT:7fkZcJTIOSA9i
- TLSH T1DB266D16B3F88727E0BA927EC0B1597DE771342B9B32C68F3104AA5D5D677828527323
- MD5 SHA1 SHA512 SSDEEP TLSH
Score9/10-
Detects executables containing URLs to raw contents of a Github gist
-
Detects executables embedding registry key / value combination indicative of disabling Windows Defen
-
Drops file in System32 directory