General
- Target 2026-03-22_db9733eab8ba98adce95e9a009bf4e62_amadey_elex_glassworm_luca-stealer_njrat_smoke-loader
- Size 1.0MB
- Sample260322-vdf78afv4k
- SHA256 31258b05ab44755b1fb76431c44b4a9484f8620e586eb1c931ba82097c788dcd
- MD5 db9733eab8ba98adce95e9a009bf4e62
- SHA1 88b46e5da2be0d4981b183fe13102fe84f106d06
- SHA512 844765b51a8d52a6e4080224e13c88bc96f7a7c55ccd7cf8f67fe24e87ff43d10a1bd4560872431d5593c3585ea769f29abd91f920ea041e77d4ae8c60ebf1ac
- SSDEEP 24576:1yGRRghW/idxBovnAoQ42GdqDXAU8+2zSBhAudA7c6o2uOxvDRBM:pRRUW6dHoEl7DQUPA7cJOtlBM
- TLSH T1CB35CF52B5E3E071C52241B04A7CEB566EBDBD3108379BAF67D8191C2E348C0DB29B97
- MD5 SHA1 SHA512 SSDEEP TLSH
Behavioral task
behavioral1
Sample
2026-03-22_db9733eab8ba98adce95e9a009bf4e62_amadey_elex_glassworm_luca-stealer_njrat_smoke-loader.exe
Resource
win10v2004-20260130-en
0 signatures
150 seconds
Malware Config
Extracted
Family
-
ffdroider
C2
-
http://101.36.107.74
Targets
-
- Target 2026-03-22_db9733eab8ba98adce95e9a009bf4e62_amadey_elex_glassworm_luca-stealer_njrat_smoke-loader
- Size 1.0MB
- SHA256 31258b05ab44755b1fb76431c44b4a9484f8620e586eb1c931ba82097c788dcd
- MD5 db9733eab8ba98adce95e9a009bf4e62
- SHA1 88b46e5da2be0d4981b183fe13102fe84f106d06
- SHA512 844765b51a8d52a6e4080224e13c88bc96f7a7c55ccd7cf8f67fe24e87ff43d10a1bd4560872431d5593c3585ea769f29abd91f920ea041e77d4ae8c60ebf1ac
- SSDEEP 24576:1yGRRghW/idxBovnAoQ42GdqDXAU8+2zSBhAudA7c6o2uOxvDRBM:pRRUW6dHoEl7DQUPA7cJOtlBM
- TLSH T1CB35CF52B5E3E071C52241B04A7CEB566EBDBD3108379BAF67D8191C2E348C0DB29B97
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Ffdroider family
-
Detects executables built or packed with MPress PE compressor