General

  • Target
    2026-05-25_1714fe069c976ab0dd7a9aa80838ccd5_amadey_elex_glassworm_luca-stealer_njrat_smoke-loader
  • Size 1.3MB
  • Sample260525-rvmvjses81
  • SHA256 ae1259cf76f4a93fa33359ab2291edfa25395cc6ca9993350471ccae1d720bc8
  • MD5 SHA1 SHA512 SSDEEP TLSH

Malware Config

Extracted

Family
  • ffdroider

C2
  • http://101.36.107.74

Targets

    • Target
      2026-05-25_1714fe069c976ab0dd7a9aa80838ccd5_amadey_elex_glassworm_luca-stealer_njrat_smoke-loader
    • Size 1.3MB
    • SHA256 ae1259cf76f4a93fa33359ab2291edfa25395cc6ca9993350471ccae1d720bc8
    • MD5 SHA1 SHA512 SSDEEP TLSH
    • Family: FFDroider

      Stealer targeting social media platform users first seen in April 2022.

    • Reads user/profile data of web browsers

      Infostealers often target stored browser data, which can include saved credentials etc.

    • Checks whether UAC is enabled

MITRE ATT&CK Enterprise v16

Tasks