General
- Target 2026-08-16_cabcd22bf5c40a6d4c06f3da76726773_amadey_elex_glassworm_hijackloader_icedid_njrat_rhadamanthys_smoke-loader_vidar
- Size 4.0MB
- Sample260816-yymsaaff74
- SHA256 6bb813ef75e6b3403c32186ef3b1917f31531d666acf448167aa5da1df157f30
- MD5 cabcd22bf5c40a6d4c06f3da76726773
- SHA1 f5338639813bf596163ea9e376e9803b62c2e974
- SHA512 b412ca5a176fa32c67dd875c2b7d607d958c2a454923cccece03d7cbfc9a2752fdceb383e23bdc0b2aa2e97e3cf28336fc6084d10814e19233d44f209c957d64
- SSDEEP 49152:jj9LxcO4Q5YRw8ZbnZFhEf2hvZPzN/xw6n1wRjJm6KxturNp5tK2887eIqZAfut3:jjBxcO4EYqf2xZPzNsGb6dM2UOo
- TLSH T15C169D22B68244F5C86351B0557B7676D774BA200B2AA6CF9388DE352F71BC19F38B43
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
8/10
Behavioral task
behavioral1
Sample
2026-08-16_cabcd22bf5c40a6d4c06f3da76726773_amadey_elex_glassworm_hijackloader_icedid_njrat_rhadamanthys_smoke-loader_vidar.exe
Resource
win10v2004-20260513-en
8 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-08-16_cabcd22bf5c40a6d4c06f3da76726773_amadey_elex_glassworm_hijackloader_icedid_njrat_rhadamanthys_smoke-loader_vidar.exe
Resource
win11ltsc2024-20260709-en
10 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-08-16_cabcd22bf5c40a6d4c06f3da76726773_amadey_elex_glassworm_hijackloader_icedid_njrat_rhadamanthys_smoke-loader_vidar
- Size 4.0MB
- SHA256 6bb813ef75e6b3403c32186ef3b1917f31531d666acf448167aa5da1df157f30
- MD5 cabcd22bf5c40a6d4c06f3da76726773
- SHA1 f5338639813bf596163ea9e376e9803b62c2e974
- SHA512 b412ca5a176fa32c67dd875c2b7d607d958c2a454923cccece03d7cbfc9a2752fdceb383e23bdc0b2aa2e97e3cf28336fc6084d10814e19233d44f209c957d64
- SSDEEP 49152:jj9LxcO4Q5YRw8ZbnZFhEf2hvZPzN/xw6n1wRjJm6KxturNp5tK2887eIqZAfut3:jjBxcO4EYqf2xZPzNsGb6dM2UOo
- TLSH T15C169D22B68244F5C86351B0557B7676D774BA200B2AA6CF9388DE352F71BC19F38B43
- MD5 SHA1 SHA512 SSDEEP TLSH
Score8/10-
Drops file in Drivers directory
-
Adds Run key to start application
-
Drops file in System32 directory