General
- Target 2026-08-21_802ce7ca5e3489110896d0ffbebed4ad_amadey_elex_glassworm_njrat_rhadamanthys_smoke-loader_stealc_stop_tofsee
- Size 1.6MB
- Sample260822-ny5b8ateqb
- SHA256 ac6aa6557bf4e2192b67f47e09765ffcb56fa6d178f83285a66a5e2b2eb2b4d9
- MD5 802ce7ca5e3489110896d0ffbebed4ad
- SHA1 1b5debb7c8775a72ce7dbf8cf3bda045fc82bbaa
- SHA512 6a10736f240ad0418c48d05a5533713da05cf0edf6986db61f2360225d0b892f88acef7e30293c5f38ccbf5bd08bd7fdebb7b0877154182ae37db6c54cc87772
- SSDEEP 12288:UIfBoDWoyFblU6hAJQnOzer5+nILwA1YaL8i0DMUNLtG4+tbQIzKYZLwLaYJOXe4:UIfjoga66AVDKUTbQIzFLwL4
- TLSH T16C850757EB814AE8E35D09365B588150D62EFE21A64F2350B46C721CCFA33878F66E3D
- MD5 SHA1 SHA512 SSDEEP TLSH
Behavioral task
behavioral1
Sample
2026-08-21_802ce7ca5e3489110896d0ffbebed4ad_amadey_elex_glassworm_njrat_rhadamanthys_smoke-loader_stealc_stop_tofsee.exe
Resource
win10v2004-20260513-en
8 signatures
150 seconds
Malware Config
Extracted
Family
-
urelas
C2
-
218.54.31.165
-
218.54.31.226
Targets
-
- Target 2026-08-21_802ce7ca5e3489110896d0ffbebed4ad_amadey_elex_glassworm_njrat_rhadamanthys_smoke-loader_stealc_stop_tofsee
- Size 1.6MB
- SHA256 ac6aa6557bf4e2192b67f47e09765ffcb56fa6d178f83285a66a5e2b2eb2b4d9
- MD5 802ce7ca5e3489110896d0ffbebed4ad
- SHA1 1b5debb7c8775a72ce7dbf8cf3bda045fc82bbaa
- SHA512 6a10736f240ad0418c48d05a5533713da05cf0edf6986db61f2360225d0b892f88acef7e30293c5f38ccbf5bd08bd7fdebb7b0877154182ae37db6c54cc87772
- SSDEEP 12288:UIfBoDWoyFblU6hAJQnOzer5+nILwA1YaL8i0DMUNLtG4+tbQIzKYZLwLaYJOXe4:UIfjoga66AVDKUTbQIzFLwL4
- TLSH T16C850757EB814AE8E35D09365B588150D62EFE21A64F2350B46C721CCFA33878F66E3D
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Executes dropped EXE