General
- Target 2026-08-28_41c53220190e40601aafb8c2fa4fcad5_amadey_elex_glassworm_redline-stealer_remcos_rhadamanthys_smoke-loader_stealc
- Size 4.2MB
- Sample260828-whvrva1fra
- SHA256 a13fb33126cf3aaaddd64a1f4d3335b938d77ec917a4cc132383bdec62b75278
- MD5 41c53220190e40601aafb8c2fa4fcad5
- SHA1 7324e800d0cd4754125949a4321a30d576db8518
- SHA512 00fe3702bb9431cb46218e20e8a2fe17d89751fc16c2b8359b38c3c5e06d93b9c6d02288d15b9527c86a6e49f1b0c685638472a0070a81328e0e593cf3304ac0
- SSDEEP 98304:njBxcO4EY+ThmUv6qp7CtZNh7XEm2UgXq9oh:njBxcO4ONmq7CtF52S9a
- TLSH T17016BE2277E88836E96311B2653CBA35493DF925073581CF93C49D19BE35AC39A3B393
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
8/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-08-28_41c53220190e40601aafb8c2fa4fcad5_amadey_elex_glassworm_redline-stealer_remcos_rhadamanthys_smoke-loader_stealc.exe
Resource
win10v2004-20260513-en
7 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-08-28_41c53220190e40601aafb8c2fa4fcad5_amadey_elex_glassworm_redline-stealer_remcos_rhadamanthys_smoke-loader_stealc.exe
Resource
win11ltsc2024-20260709-en
9 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-08-28_41c53220190e40601aafb8c2fa4fcad5_amadey_elex_glassworm_redline-stealer_remcos_rhadamanthys_smoke-loader_stealc
- Size 4.2MB
- SHA256 a13fb33126cf3aaaddd64a1f4d3335b938d77ec917a4cc132383bdec62b75278
- MD5 41c53220190e40601aafb8c2fa4fcad5
- SHA1 7324e800d0cd4754125949a4321a30d576db8518
- SHA512 00fe3702bb9431cb46218e20e8a2fe17d89751fc16c2b8359b38c3c5e06d93b9c6d02288d15b9527c86a6e49f1b0c685638472a0070a81328e0e593cf3304ac0
- SSDEEP 98304:njBxcO4EY+ThmUv6qp7CtZNh7XEm2UgXq9oh:njBxcO4ONmq7CtF52S9a
- TLSH T17016BE2277E88836E96311B2653CBA35493DF925073581CF93C49D19BE35AC39A3B393
- MD5 SHA1 SHA512 SSDEEP TLSH
Score8/10-
Drops file in Drivers directory
-
Adds Run key to start application
-
Drops file in System32 directory