General
- Target 2026-08-19_0472adee96739cacbeac54e68d4ed783_amadey_elex_glassworm_redline-stealer_remcos_rhadamanthys_smoke-loader_stealc
- Size 3.4MB
- Sample260819-hfd5esdf47
- SHA256 8b128ae0508360d4aba52fe1394100a593338b767a94437c972db217642ff595
- MD5 0472adee96739cacbeac54e68d4ed783
- SHA1 abed191916710c6b7d40508c39e14c649ec785b9
- SHA512 4b95c2d4a4c18d04fc2e7db166dca99a9d7cbec6103c2704498d420bb6d8467987115e02b50dc17e39f07a65ac4ef5c3a8fcff2231db334cf24a00acab146d5d
- SSDEEP 49152:YNPFqKzT2bwZr1Rba/cllZRWqzd79VTu51rBmmWOZO9SEmBCp2BDseKECCJPpDrZ:Y1fThmUv6qp7CtZNh7XEK
- TLSH T1AFF5AE3076E8883AE5B7107256787624093DF87A4B3581CF63C45A5DAE35BC29A3B3D3
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
8/10
Behavioral task
behavioral1
Sample
2026-08-19_0472adee96739cacbeac54e68d4ed783_amadey_elex_glassworm_redline-stealer_remcos_rhadamanthys_smoke-loader_stealc.exe
Resource
win10v2004-20260513-en
8 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-08-19_0472adee96739cacbeac54e68d4ed783_amadey_elex_glassworm_redline-stealer_remcos_rhadamanthys_smoke-loader_stealc.exe
Resource
win11ltsc2024-20260710-en
10 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-08-19_0472adee96739cacbeac54e68d4ed783_amadey_elex_glassworm_redline-stealer_remcos_rhadamanthys_smoke-loader_stealc
- Size 3.4MB
- SHA256 8b128ae0508360d4aba52fe1394100a593338b767a94437c972db217642ff595
- MD5 0472adee96739cacbeac54e68d4ed783
- SHA1 abed191916710c6b7d40508c39e14c649ec785b9
- SHA512 4b95c2d4a4c18d04fc2e7db166dca99a9d7cbec6103c2704498d420bb6d8467987115e02b50dc17e39f07a65ac4ef5c3a8fcff2231db334cf24a00acab146d5d
- SSDEEP 49152:YNPFqKzT2bwZr1Rba/cllZRWqzd79VTu51rBmmWOZO9SEmBCp2BDseKECCJPpDrZ:Y1fThmUv6qp7CtZNh7XEK
- TLSH T1AFF5AE3076E8883AE5B7107256787624093DF87A4B3581CF63C45A5DAE35BC29A3B3D3
- MD5 SHA1 SHA512 SSDEEP TLSH
Score8/10-
Drops file in Drivers directory
-
Adds Run key to start application
-
Drops file in System32 directory