General
- Target 2026-05-04_439906d66bd1388b4e49a09e3958a9ec_amadey_elex_glassworm_luca-stealer_njrat_smoke-loader
- Size 4.0MB
- Sample260504-sd1whsat3k
- SHA256 9e4f22601a55d73212774c62c98f772703a70ed9c446facaf09b0947996706c0
- MD5 439906d66bd1388b4e49a09e3958a9ec
- SHA1 50d2682f6adb6fc9a84fcf8a6171cc9ca5383292
- SHA512 89fcfcbb3bb8b67133503721fc4d2d88adfa343bb4e6512aefd8309ae6e1d19ae3143f51e8ae03bfee379a0abbcddcfb4c7a6afdce0c1b70b2c7dbefa5c89ce1
- SSDEEP 49152:v0OXFz9wvJpGVbEfOXBBDEhOt5TB34alrfUbmtObRR:vVrwvJpGfBBDEiTCqcbBb
- TLSH T1C316BE52667198E1E38903B2E4A9877D7527EFEFC73C13C72694306099644EBE22EF05
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
7/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-05-04_439906d66bd1388b4e49a09e3958a9ec_amadey_elex_glassworm_luca-stealer_njrat_smoke-loader.exe
Resource
win10v2004-20260130-en
8 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-05-04_439906d66bd1388b4e49a09e3958a9ec_amadey_elex_glassworm_luca-stealer_njrat_smoke-loader.exe
Resource
win11-20260130-en
7 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-05-04_439906d66bd1388b4e49a09e3958a9ec_amadey_elex_glassworm_luca-stealer_njrat_smoke-loader
- Size 4.0MB
- SHA256 9e4f22601a55d73212774c62c98f772703a70ed9c446facaf09b0947996706c0
- MD5 439906d66bd1388b4e49a09e3958a9ec
- SHA1 50d2682f6adb6fc9a84fcf8a6171cc9ca5383292
- SHA512 89fcfcbb3bb8b67133503721fc4d2d88adfa343bb4e6512aefd8309ae6e1d19ae3143f51e8ae03bfee379a0abbcddcfb4c7a6afdce0c1b70b2c7dbefa5c89ce1
- SSDEEP 49152:v0OXFz9wvJpGVbEfOXBBDEhOt5TB34alrfUbmtObRR:vVrwvJpGfBBDEiTCqcbBb
- TLSH T1C316BE52667198E1E38903B2E4A9877D7527EFEFC73C13C72694306099644EBE22EF05
- MD5 SHA1 SHA512 SSDEEP TLSH
Score7/10-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Drops startup file
-
Executes dropped EXE