2026-08-20_349202669b5f28d801cf35637dd385b0_amadey_elex_glassworm_rhadamanthys_smoke-loader_stop

General

Target
2026-08-20_349202669b5f28d801cf35637dd385b0_amadey_elex_glassworm_rhadamanthys_smoke-loader_stop
Size 13.0MB
Sample260820-dn8xjsbb62
SHA256 3e2f7782232f75a11e99e29b0254add0dba73c7148940da18a1ddd4fba8a53fc
MD5 349202669b5f28d801cf35637dd385b0
SHA1 05f1bb29756c4e16c3bdc0a1f5cc87401b05e39f
SHA512 9c63d7cc1295804afa523bf21c2907a6e4219b56784d787829ed72711239cc8d06c194c85720e4b2dca3c179dc5a31aa41a43cfdb9cca677573cd8313474bafc
SSDEEP 393216:E/YFf1VKnpMkCOAKF4Xr3AJm3H8GGrlcKhVeF5x/AUgql2wUqRCOkSIsutpGrDHr:WaTKikCOAKF4Xr3AJm3cRrlvhVeF5lXv
TLSH
T1B4D6BF1435BAF30DF1735BB619E06DB146EAA9231F43D5D662E01E470BE2B41EB8213B
MD5 SHA1 SHA512 SSDEEP TLSH

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
2026-08-20_349202669b5f28d801cf35637dd385b0_amadey_elex_glassworm_rhadamanthys_smoke-loader_stop

File Explorer

2026-08-20_349202669b5f28d801cf35637dd385b0_amadey_elex_glassworm_rhadamanthys_smoke-loader_stop

.exe 13.0MB

2026-08-20_349202669b5f28d801cf35637dd385b0_amadey_elex_glassworm_rhadamanthys_smoke-loader_stop

IMPHASH 0f7d0ed8477bf9ca9b4b2ce07e02a90e
SHA256 3e2f7782232f75a11e99e29b0254add0dba73c7148940da18a1ddd4fba8a53fc
MD5 349202669b5f28d801cf35637dd385b0
SHA1 05f1bb29756c4e16c3bdc0a1f5cc87401b05e39f
SHA512 9c63d7cc1295804afa523bf21c2907a6e4219b56784d787829ed72711239cc8d06c194c85720e4b2dca3c179dc5a31aa41a43cfdb9cca677573cd8313474bafc
SSDEEP 393216:E/YFf1VKnpMkCOAKF4Xr3AJm3H8GGrlcKhVeF5x/AUgql2wUqRCOkSIsutpGrDHr:WaTKikCOAKF4Xr3AJm3cRrlvhVeF5lXv
TLSH
T1B4D6BF1435BAF30DF1735BB619E06DB146EAA9231F43D5D662E01E470BE2B41EB8213B
MD5 SHA1 SHA512 SSDEEP TLSH

windows:4 windows x86 arch:x86

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

0

Major OS version

4

Entry point

8020

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths

e:\Develope\msi2exe\release\msi2exestub.pdb

kernel32

GetTempPathW GetTempFileNameW FindResourceW SizeofResource LoadResource LockResource CreateThread CreateFileW DeleteFileW CreateFileA GetStringTypeW GetStringTypeA LCMapStringW LCMapStringA WriteConsoleW GetConsoleOutputCP WriteConsoleA ExitProcess CreateProcessW GetLastError WriteFile FlushFileBuffers CloseHandle GetProcAddress GetModuleHandleA HeapFree GetVersionExA HeapAlloc GetProcessHeap GetStartupInfoW TerminateProcess GetCurrentProcess UnhandledExceptionFilter SetUnhandledExceptionFilter IsDebuggerPresent TlsGetValue TlsAlloc TlsSetValue TlsFree InterlockedIncrement SetLastError GetCurrentThreadId InterlockedDecrement GetStdHandle GetModuleFileNameA DeleteCriticalSection LeaveCriticalSection EnterCriticalSection LoadLibraryA InitializeCriticalSection GetModuleFileNameW FreeEnvironmentStringsA MultiByteToWideChar GetEnvironmentStrings FreeEnvironmentStringsW GetEnvironmentStringsW GetCommandLineA GetCommandLineW SetHandleCount GetFileType GetStartupInfoA HeapDestroy HeapCreate VirtualFree QueryPerformanceCounter GetTickCount GetCurrentProcessId GetSystemTimeAsFileTime SetFilePointer WideCharToMultiByte GetConsoleCP GetConsoleMode GetCPInfo GetACP GetOEMCP IsValidCodePage Sleep HeapSize RtlUnwind GetLocaleInfoA VirtualAlloc HeapReAlloc SetStdHandle RaiseException

user32

DefWindowProcW PostQuitMessage EndPaint BeginPaint UpdateWindow ShowWindow CreateWindowExW GetSystemMetrics RegisterClassExW GetSysColorBrush LoadCursorW PostMessageW DispatchMessageW TranslateMessage GetMessageW MessageBoxW InvalidateRect

gdi32

TextOutW SetBkMode SelectObject GetStockObject DeleteObject

Sharing

General

Malware Config

Signatures

File Explorer

2026-08-20_349202669b5f28d801cf35637dd385b0_amadey_elex_glassworm_rhadamanthys_smoke-loader_stop

kernel32

user32

gdi32

generic