General
- Target 2026-08-18_dbc6f0ee5a4e0756309522c9c22b6758_amadey_elex_glassworm_rhadamanthys_smoke-loader_stealc_stop_swisyn
- Size 815KB
- Sample260818-ymt28aba59
- SHA256 d4232e9e50aced2b2c25649aaa3352c740631f055246cd0ecce6899e4e3c9cfc
- MD5 dbc6f0ee5a4e0756309522c9c22b6758
- SHA1 31ca2475577c0504c6d5ee62258d662fd38c1cf0
- SHA512 a54e0dd7e74f7a9275b6e5481fbadedf58a0512dd22da7bfdd20995f612b5f63719178583a5e90a6aa694851727c4f7e91aa5433b22a38fc7dcb0fe7dc03ce26
- SSDEEP 12288:PFUNDaLwSlI/+xE1gROjVkKvhox0EgcBnAaqT4nCi6CK:PFOaBI/+xE1gROjGMhoCEgcBnCT4nbw
- TLSH T10C05AE17B68180B6E53340B520B7977A6E37AE320729D9C377A429214F313D27E7D39A
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
10/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-08-18_dbc6f0ee5a4e0756309522c9c22b6758_amadey_elex_glassworm_rhadamanthys_smoke-loader_stealc_stop_swisyn.exe
Resource
win10v2004-20260513-en
10 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-08-18_dbc6f0ee5a4e0756309522c9c22b6758_amadey_elex_glassworm_rhadamanthys_smoke-loader_stealc_stop_swisyn.exe
Resource
win11ltsc2024-20260709-en
10 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-08-18_dbc6f0ee5a4e0756309522c9c22b6758_amadey_elex_glassworm_rhadamanthys_smoke-loader_stealc_stop_swisyn
- Size 815KB
- SHA256 d4232e9e50aced2b2c25649aaa3352c740631f055246cd0ecce6899e4e3c9cfc
- MD5 dbc6f0ee5a4e0756309522c9c22b6758
- SHA1 31ca2475577c0504c6d5ee62258d662fd38c1cf0
- SHA512 a54e0dd7e74f7a9275b6e5481fbadedf58a0512dd22da7bfdd20995f612b5f63719178583a5e90a6aa694851727c4f7e91aa5433b22a38fc7dcb0fe7dc03ce26
- SSDEEP 12288:PFUNDaLwSlI/+xE1gROjVkKvhox0EgcBnAaqT4nCi6CK:PFOaBI/+xE1gROjGMhoCEgcBnCT4nbw
- TLSH T10C05AE17B68180B6E53340B520B7977A6E37AE320729D9C377A429214F313D27E7D39A
- MD5 SHA1 SHA512 SSDEEP TLSH
Score10/10-
Modifies visibility of hidden/system files in Explorer
-
Executes dropped EXE
-
Adds Run key to start application
-
Drops file in System32 directory