General
- Target 2026-08-25_f4de077b28f6c464c4284af77bc29b5c_amadey_elex_glassworm_njrat_redline-stealer_rhadamanthys_smoke-loader_stealc_stop_tofsee
- Size 1006KB
- Sample260826-cd19aa1eqg
- SHA256 50b609ee806407693ba8372102cb64bbc19d4079d983156b45a5e01013e61d0e
- MD5 f4de077b28f6c464c4284af77bc29b5c
- SHA1 429b58457027001d82c26b2fa2afd7c4eb0bbf70
- SHA512 06ee6f485251be4c7b80a2825ce4f6590163d6310e2e9af30ad4fd0c8fcf2e43bfdbaa2a9ec4bfc38128a6335eb098fac594a80f7de3358a873a62fa3148e04b
- SSDEEP 6144:SrLpoFIaj1Y48bgFwZ2L4I689/drLHgDe7eVvaDtZV7+TDp7qer5+n:SrVoFN8ELKA1Ya3er5+n
- TLSH T19025E563E7918AE8E66D447A5F188144D72EF221AA0F6311786C130DCF5778B8F66E3C
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
10/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-08-25_f4de077b28f6c464c4284af77bc29b5c_amadey_elex_glassworm_njrat_redline-stealer_rhadamanthys.exe
Resource
win10v2004-20260513-en
10 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-08-25_f4de077b28f6c464c4284af77bc29b5c_amadey_elex_glassworm_njrat_redline-stealer_rhadamanthys.exe
Resource
win11ltsc2024-20260709-en
10 signatures
150 seconds
Malware Config
Extracted
Family
-
smokeloader
Version
-
2022
C2
-
http://potunulit.org/
-
http://hutnilior.net/
-
http://bulimu55t.net/
-
http://soryytlic4.net/
-
http://novanosa5org.org/
-
http://nuljjjnuli.org/
-
http://tolilolihul.net/
-
http://somatoka51hub.net/
-
http://hujukui3.net/
-
http://bukubuka1.net/
-
http://golilopaster.org/
-
http://newzelannd66.org/
-
http://otriluyttn.org/
rc4.i32
rc4.i32
Targets
-
- Target 2026-08-25_f4de077b28f6c464c4284af77bc29b5c_amadey_elex_glassworm_njrat_redline-stealer_rhadamanthys_smoke-loader_stealc_stop_tofsee
- Size 1006KB
- SHA256 50b609ee806407693ba8372102cb64bbc19d4079d983156b45a5e01013e61d0e
- MD5 f4de077b28f6c464c4284af77bc29b5c
- SHA1 429b58457027001d82c26b2fa2afd7c4eb0bbf70
- SHA512 06ee6f485251be4c7b80a2825ce4f6590163d6310e2e9af30ad4fd0c8fcf2e43bfdbaa2a9ec4bfc38128a6335eb098fac594a80f7de3358a873a62fa3148e04b
- SSDEEP 6144:SrLpoFIaj1Y48bgFwZ2L4I689/drLHgDe7eVvaDtZV7+TDp7qer5+n:SrVoFN8ELKA1Ya3er5+n
- TLSH T19025E563E7918AE8E66D447A5F188144D72EF221AA0F6311786C130DCF5778B8F66E3C
- MD5 SHA1 SHA512 SSDEEP TLSH
Score10/10-
Deletes itself