General
- Target 2026-08-24_4a183ad93c8b9584f406267595336e04_amadey_elex_emotet_glassworm_rhadamanthys_smoke-loader
- Size 1.6MB
- Sample260825-q9152shd78
- SHA256 6b0cc06efb4eb4c7ad0772d21349ade25fa828792d5ff8a2f7b5ec13a038d192
- MD5 4a183ad93c8b9584f406267595336e04
- SHA1 c8c63d82a3b534699ecadfce00b7fad3a9a05411
- SHA512 080f810a73801cd5113d2e3dd861767329043dbe5131c8825cab2c4a3fb866a44d0b7b5ac6ce6a74afe50971dd11f6752faf8b40632d3f8f5a6df8c15b7a9460
- SSDEEP 24576:FG4/FdWJ4OVklBDPZF65u6QrOcGXY5SRhIMrd8hfuuk1W/baYZTlILUsWAc:FB/FdWJ4wklBDP1dGXrIDhmIeYZTl4Fc
- TLSH T1CC85F123359140DAD0D2C8398937BFF073F95E275E41A877A7A9FECA19315E192139C2
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
6/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-08-24_4a183ad93c8b9584f406267595336e04_amadey_elex_emotet_glassworm_rhadamanthys_smoke-loader.exe
Resource
win10v2004-20260513-en
6 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-08-24_4a183ad93c8b9584f406267595336e04_amadey_elex_emotet_glassworm_rhadamanthys_smoke-loader.exe
Resource
win11ltsc2024-20260709-en
6 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-08-24_4a183ad93c8b9584f406267595336e04_amadey_elex_emotet_glassworm_rhadamanthys_smoke-loader
- Size 1.6MB
- SHA256 6b0cc06efb4eb4c7ad0772d21349ade25fa828792d5ff8a2f7b5ec13a038d192
- MD5 4a183ad93c8b9584f406267595336e04
- SHA1 c8c63d82a3b534699ecadfce00b7fad3a9a05411
- SHA512 080f810a73801cd5113d2e3dd861767329043dbe5131c8825cab2c4a3fb866a44d0b7b5ac6ce6a74afe50971dd11f6752faf8b40632d3f8f5a6df8c15b7a9460
- SSDEEP 24576:FG4/FdWJ4OVklBDPZF65u6QrOcGXY5SRhIMrd8hfuuk1W/baYZTlILUsWAc:FB/FdWJ4wklBDP1dGXrIDhmIeYZTl4Fc
- TLSH T1CC85F123359140DAD0D2C8398937BFF073F95E275E41A877A7A9FECA19315E192139C2
- MD5 SHA1 SHA512 SSDEEP TLSH
Score6/10-
Adds Run key to start application
-
Enumerates connected drives
Attempts to read the root path of hard drives other than the default C: drive.
-
Drops file in System32 directory