General
- Target 2026-05-04_c1aa9762800c11db1737662638b37fb1_amadey_elex_glassworm_luca-stealer_njrat_smoke-loader
- Size 4.0MB
- Sample260504-tdcdlae15s
- SHA256 b4f515298217055c458113f1bfb3b02f824006adf314c44cf22cbe2e3adcaa75
- MD5 c1aa9762800c11db1737662638b37fb1
- SHA1 b669abdf25b2c2a566cae55e3fd55342f0eaeb76
- SHA512 6c3e031541e39fca97d4c429c625df40f277b1fdafc72b97ebdb3876fda856f2218a230ce88cde9962a067b69799286efb03c5c0dc1698d55ad91dd4796413c3
- SSDEEP 49152:10OXFz9wvJpGVbBz0LHcOozu6H7Peh1Mb3uFSjhP5EUtj4lr:1VrwvJpGfz07ckMTuFChP5/kB
- TLSH T18E169B3C6A03602DDE91C470AE55CA650B28F165177C6CFB62EB1064B76F1DF29EC28B
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
7/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-05-04_c1aa9762800c11db1737662638b37fb1_amadey_elex_glassworm_luca-stealer_njrat_smoke-loader.exe
Resource
win10v2004-20260130-en
8 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-05-04_c1aa9762800c11db1737662638b37fb1_amadey_elex_glassworm_luca-stealer_njrat_smoke-loader.exe
Resource
win11-20260130-en
7 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-05-04_c1aa9762800c11db1737662638b37fb1_amadey_elex_glassworm_luca-stealer_njrat_smoke-loader
- Size 4.0MB
- SHA256 b4f515298217055c458113f1bfb3b02f824006adf314c44cf22cbe2e3adcaa75
- MD5 c1aa9762800c11db1737662638b37fb1
- SHA1 b669abdf25b2c2a566cae55e3fd55342f0eaeb76
- SHA512 6c3e031541e39fca97d4c429c625df40f277b1fdafc72b97ebdb3876fda856f2218a230ce88cde9962a067b69799286efb03c5c0dc1698d55ad91dd4796413c3
- SSDEEP 49152:10OXFz9wvJpGVbBz0LHcOozu6H7Peh1Mb3uFSjhP5EUtj4lr:1VrwvJpGfz07ckMTuFChP5/kB
- TLSH T18E169B3C6A03602DDE91C470AE55CA650B28F165177C6CFB62EB1064B76F1DF29EC28B
- MD5 SHA1 SHA512 SSDEEP TLSH
Score7/10-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Drops startup file
-
Executes dropped EXE