Extracted

• • Target
    2026-05-25_7932b7e7c1d48b6ae26a621cdbb07513_amadey_elex_glassworm_luca-stealer_njrat_smoke-loader
  • Size 1.5MB
  • SHA256 b92691fc83182989d1e7660eb3fcadb260fd7b85a9219813a90cc2bb2e0f1483
  • MD5 7932b7e7c1d48b6ae26a621cdbb07513
  • SHA1 338eeae2531fc3508ea1cbdaa9c80fc2616da48f
  • SHA512 b14392cd23a54c1f6ae6462d9addcb033bc9a5b300893cffc9a18c61445333fa1a9b00b45603ab7b236f46f9d272323ed3ed4c966c5538df20567b475cd1df6f
  • SSDEEP 24576:C/yYhrBMV9eWg7xjnXLDDa4pw8Q3anJJgWODXYvwwa16MaCNlOX0EkHBHvcr6:qyYwY7xXzi8Q3q6BaCNGkh0r
  • TLSH
    T14C758D10F651D03AF4E300FACABA557CE928BF20132455EB63C46AAD5B25CE17D32A67
  • MD5 SHA1 SHA512 SSDEEP TLSH

  Score

  10^/10

  defense_evasiondiscoveryffdroiderspywarestealertrojan

  • Family: FFDroider

    Stealer targeting social media platform users first seen in April 2022.

    stealerffdroider

  • Reads user/profile data of web browsers

    Infostealers often target stored browser data, which can include saved credentials etc.

    spywarestealer

  • Checks whether UAC is enabled

    defense_evasiontrojan
  behavioral1behavioral2