General
- Target 2026-06-04_764e147902ae01caf019dffab874a93b_amadey_elex_glassworm_luca-stealer_njrat_redline-stealer_remcos_rhadamanthys_smoke-loader_stealc_stop
- Size 2.4MB
- Sample260604-nzwfpsew9r
- SHA256 d03a2782394a8f92d8d05b5638e7889f154c79931975ca8704c85ce9204922c1
- MD5 764e147902ae01caf019dffab874a93b
- SHA1 04484b42b1a43eb4d7b6ae17e45395c5251b2072
- SHA512 08119f4598a51e71461ba9be8b158ebb5736f5da491ed3fee13f5f01fc9f4b253c45eea2d8907969595ac7997e34218b230943ea302a6256ca26ec0b1797f867
- SSDEEP 49152:H9WXJ9wwc+V8tgJd8PHOqCGxSftT0MjL/gxkOjc9210qps/7UX:H9YMZ+CgaG1GxQeMjLsAAa/7e
- TLSH T118B5F141F6C184F1D0A209318DA5D23176387DE11F2D818B7394BFBA3EB17E35A366A9
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
10/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-06-04_764e147902ae01caf019dffab874a93b_amadey_elex_glassworm_luca-stealer_njrat_redline-stealer.exe
Resource
win10v2004-20260513-en
9 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-06-04_764e147902ae01caf019dffab874a93b_amadey_elex_glassworm_luca-stealer_njrat_redline-stealer.exe
Resource
win11-20260513-en
9 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-06-04_764e147902ae01caf019dffab874a93b_amadey_elex_glassworm_luca-stealer_njrat_redline-stealer_remcos_rhadamanthys_smoke-loader_stealc_stop
- Size 2.4MB
- SHA256 d03a2782394a8f92d8d05b5638e7889f154c79931975ca8704c85ce9204922c1
- MD5 764e147902ae01caf019dffab874a93b
- SHA1 04484b42b1a43eb4d7b6ae17e45395c5251b2072
- SHA512 08119f4598a51e71461ba9be8b158ebb5736f5da491ed3fee13f5f01fc9f4b253c45eea2d8907969595ac7997e34218b230943ea302a6256ca26ec0b1797f867
- SSDEEP 49152:H9WXJ9wwc+V8tgJd8PHOqCGxSftT0MjL/gxkOjc9210qps/7UX:H9YMZ+CgaG1GxQeMjLsAAa/7e
- TLSH T118B5F141F6C184F1D0A209318DA5D23176387DE11F2D818B7394BFBA3EB17E35A366A9
- MD5 SHA1 SHA512 SSDEEP TLSH
Score10/10-
Modifies WinLogon for persistence
-
Adds Run key to start application
-
Drops file in System32 directory
MITRE ATT&CK Enterprise v16
Persistence
Boot or Logon Autostart Execution
2Registry Run Keys / Startup Folder
1Winlogon Helper DLL
1Privilege Escalation
Boot or Logon Autostart Execution
2Registry Run Keys / Startup Folder
1Winlogon Helper DLL
1