General
- Target 2026-06-25_50acc00b20b05b40358b3638e26f9106_amadey_elex_glassworm_luca-stealer_njrat_smoke-loader
- Size 4.0MB
- Sample260629-2d5ddagx4s
- SHA256 efb5d31181e4abe1d3d69489f666685062eb17d9bc094e86cc85274351de0f1a
- MD5 50acc00b20b05b40358b3638e26f9106
- SHA1 70702b63deb5437655dc6fbf6f967018982ea21d
- SHA512 901476d7b3d4655e19d767480b3e0cfecf6e304b14c0a9ca82aeb9cae601b0a358fd05d9de276ef84fa21ed99e5ee86fd6a3e074a69d62a5671441763beb81b0
- SSDEEP 49152:g0OXFz9wvJpGVbfbyJ73JO2Nt+bEn0VLyON6Fk1SE0yz8J6g7v:gVrwvJpG0J7JpNt+40VLyy1/z8Jf
- TLSH T1C7169D2378C190E3E1F7003A93A56E75BA2B6A1687979CC752A1E4619F5C0CF32E7D07
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
7/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-06-25_50acc00b20b05b40358b3638e26f9106_amadey_elex_glassworm_luca-stealer_njrat_smoke-loader.exe
Resource
win10v2004-20260513-en
8 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-06-25_50acc00b20b05b40358b3638e26f9106_amadey_elex_glassworm_luca-stealer_njrat_smoke-loader.exe
Resource
win11ltsc2024-20260629-en
7 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-06-25_50acc00b20b05b40358b3638e26f9106_amadey_elex_glassworm_luca-stealer_njrat_smoke-loader
- Size 4.0MB
- SHA256 efb5d31181e4abe1d3d69489f666685062eb17d9bc094e86cc85274351de0f1a
- MD5 50acc00b20b05b40358b3638e26f9106
- SHA1 70702b63deb5437655dc6fbf6f967018982ea21d
- SHA512 901476d7b3d4655e19d767480b3e0cfecf6e304b14c0a9ca82aeb9cae601b0a358fd05d9de276ef84fa21ed99e5ee86fd6a3e074a69d62a5671441763beb81b0
- SSDEEP 49152:g0OXFz9wvJpGVbfbyJ73JO2Nt+bEn0VLyON6Fk1SE0yz8J6g7v:gVrwvJpG0J7JpNt+40VLyy1/z8Jf
- TLSH T1C7169D2378C190E3E1F7003A93A56E75BA2B6A1687979CC752A1E4619F5C0CF32E7D07
- MD5 SHA1 SHA512 SSDEEP TLSH
Score7/10-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Drops startup file
-
Executes dropped EXE