General
- Target 2026-08-20_3d72f14e9835e74efc101835a1cd0162_amadey_elex_glassworm_hijackloader_rhadamanthys_stop
- Size 3.8MB
- Sample260820-wlmweasfrf
- SHA256 0b31ea6c6fe8d87dc6d73557445912ff22219fc2368c2bf5b4ab71cd784ea803
- MD5 3d72f14e9835e74efc101835a1cd0162
- SHA1 342342c9c304d45dd20b6715c5576622cd8604a0
- SHA512 f9dd7b5c95b3265c3cb60540dc71d2f0e753b420b5c320615328885f9ea860ba404692dc20ab000b4d1fe8404c0cc1b1a0fc7b45e9da40d9daf4e296c7f306c5
- SSDEEP 49152:Dx4fD2eW4SkZP4sz9MbPVT3S9tsgX8zEC8ULgCSA/Bkj0e:7fkZcPVTIOSAI
- TLSH T1CA066C1273F88627E0BA927FC0B1197DA775793B9B36C78F3404B95E48667828527323
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
10/10
Static task
static1
3 signatures
Behavioral task
behavioral1
Sample
2026-08-20_3d72f14e9835e74efc101835a1cd0162_amadey_elex_glassworm_hijackloader_rhadamanthys_stop.exe
Resource
win10v2004-20260513-en
6 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-08-20_3d72f14e9835e74efc101835a1cd0162_amadey_elex_glassworm_hijackloader_rhadamanthys_stop.exe
Resource
win11ltsc2024-20260709-en
6 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-08-20_3d72f14e9835e74efc101835a1cd0162_amadey_elex_glassworm_hijackloader_rhadamanthys_stop
- Size 3.8MB
- SHA256 0b31ea6c6fe8d87dc6d73557445912ff22219fc2368c2bf5b4ab71cd784ea803
- MD5 3d72f14e9835e74efc101835a1cd0162
- SHA1 342342c9c304d45dd20b6715c5576622cd8604a0
- SHA512 f9dd7b5c95b3265c3cb60540dc71d2f0e753b420b5c320615328885f9ea860ba404692dc20ab000b4d1fe8404c0cc1b1a0fc7b45e9da40d9daf4e296c7f306c5
- SSDEEP 49152:Dx4fD2eW4SkZP4sz9MbPVT3S9tsgX8zEC8ULgCSA/Bkj0e:7fkZcPVTIOSAI
- TLSH T1CA066C1273F88627E0BA927FC0B1197DA775793B9B36C78F3404B95E48667828527323
- MD5 SHA1 SHA512 SSDEEP TLSH
Score9/10-
Detects executables containing URLs to raw contents of a Github gist
-
Detects executables embedding registry key / value combination indicative of disabling Windows Defen
-
Drops file in System32 directory