General
- Target 2026-06-06_c31f714ad30dd56e8f87519fc692282f_amadey_elex_glassworm_luca-stealer_njrat_smoke-loader
- Size 4.0MB
- Sample260606-2ynlcsdy2v
- SHA256 fcb58f2a24c7a76068c7fad9aab3bd19c6f29d04c8c519e708941b8049427473
- MD5 c31f714ad30dd56e8f87519fc692282f
- SHA1 754da775f57aef045f3cec3b86df1a2e81d9da27
- SHA512 cdd83ab8f7e657fb913a584cf7e053f5543fdb9a8ee1b458051652fcfc472bc202578bcc24f024e328b0919023511f9aacb708df9c2a9390dad6c5d514484829
- SSDEEP 49152:A0OXFz9wvJpGVbfSgmObb2lMr2pYlpvy/Pf:AVrwvJpG+YKMruYl5OPf
- TLSH T1DB169D3D66338062D9ADC8B470E685EB3AE85710932760DF42A0E7F496133D23665DFE
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
7/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-06-06_c31f714ad30dd56e8f87519fc692282f_amadey_elex_glassworm_luca-stealer_njrat_smoke-loader.exe
Resource
win10v2004-20260513-en
8 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-06-06_c31f714ad30dd56e8f87519fc692282f_amadey_elex_glassworm_luca-stealer_njrat_smoke-loader.exe
Resource
win11-20260513-en
7 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-06-06_c31f714ad30dd56e8f87519fc692282f_amadey_elex_glassworm_luca-stealer_njrat_smoke-loader
- Size 4.0MB
- SHA256 fcb58f2a24c7a76068c7fad9aab3bd19c6f29d04c8c519e708941b8049427473
- MD5 c31f714ad30dd56e8f87519fc692282f
- SHA1 754da775f57aef045f3cec3b86df1a2e81d9da27
- SHA512 cdd83ab8f7e657fb913a584cf7e053f5543fdb9a8ee1b458051652fcfc472bc202578bcc24f024e328b0919023511f9aacb708df9c2a9390dad6c5d514484829
- SSDEEP 49152:A0OXFz9wvJpGVbfSgmObb2lMr2pYlpvy/Pf:AVrwvJpG+YKMruYl5OPf
- TLSH T1DB169D3D66338062D9ADC8B470E685EB3AE85710932760DF42A0E7F496133D23665DFE
- MD5 SHA1 SHA512 SSDEEP TLSH
Score7/10-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Drops startup file
-
Executes dropped EXE