General
- Target 2026-08-16_750b9a22d66dd1bf9d886b5c31205e22_amadey_elex_glassworm_hijackloader_rhadamanthys_stop
- Size 4.6MB
- Sample260816-mq923ahn4v
- SHA256 6b351ebb7f6a2bae10f7b29d7863cacd7663768d4ac7f2023fae7f82c439bd17
- MD5 750b9a22d66dd1bf9d886b5c31205e22
- SHA1 a5cf3bc25b1b460a60e6720decbffb1d8e6c066d
- SHA512 64820231146a4c1a4e60535085d29f7b5264ecc09f6f7614d7a9e6ecd13daccac9caddcf262f53f55f5e7203d0d55ac8c6527b66704b5d1a74b7fc9201929771
- SSDEEP 49152:Dx4fD2eW4SkZP4sz9MbotL2tLIvWqJtb2IqT3S9tsgX8zEC8ULgCSA/Bkj0A:7fkZcoV2Vt1TIOSA6
- TLSH T1C6266D12B3F88637E0BA927EC0B15A7DE771742B9B32C68F3104A65D5D677828527323
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
10/10
Static task
static1
3 signatures
Behavioral task
behavioral1
Sample
2026-08-16_750b9a22d66dd1bf9d886b5c31205e22_amadey_elex_glassworm_hijackloader_rhadamanthys_stop.exe
Resource
win10v2004-20260513-en
6 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-08-16_750b9a22d66dd1bf9d886b5c31205e22_amadey_elex_glassworm_hijackloader_rhadamanthys_stop.exe
Resource
win11ltsc2024-20260709-en
6 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-08-16_750b9a22d66dd1bf9d886b5c31205e22_amadey_elex_glassworm_hijackloader_rhadamanthys_stop
- Size 4.6MB
- SHA256 6b351ebb7f6a2bae10f7b29d7863cacd7663768d4ac7f2023fae7f82c439bd17
- MD5 750b9a22d66dd1bf9d886b5c31205e22
- SHA1 a5cf3bc25b1b460a60e6720decbffb1d8e6c066d
- SHA512 64820231146a4c1a4e60535085d29f7b5264ecc09f6f7614d7a9e6ecd13daccac9caddcf262f53f55f5e7203d0d55ac8c6527b66704b5d1a74b7fc9201929771
- SSDEEP 49152:Dx4fD2eW4SkZP4sz9MbotL2tLIvWqJtb2IqT3S9tsgX8zEC8ULgCSA/Bkj0A:7fkZcoV2Vt1TIOSA6
- TLSH T1C6266D12B3F88637E0BA927EC0B15A7DE771742B9B32C68F3104A65D5D677828527323
- MD5 SHA1 SHA512 SSDEEP TLSH
Score9/10-
Detects executables containing URLs to raw contents of a Github gist
-
Detects executables embedding registry key / value combination indicative of disabling Windows Defen
-
Drops file in System32 directory