General
- Target 2026-06-25_455dafb26873cc52035a7fee3f1381a6_amadey_elex_glassworm_luca-stealer_njrat_smoke-loader
- Size 4.0MB
- Sample260629-2ng1tshz7l
- SHA256 b57dece63545898bb632d3744bf58c67a5b93c0f048a13b6974ef71c42fee3c2
- MD5 455dafb26873cc52035a7fee3f1381a6
- SHA1 9dfed861e315516e33f2a5c17faf780dd46ff82f
- SHA512 51f06c030617f3c296f227aac49c58c32b27234f051dc2e7d4f030a6c4c4956ac2de1dbf810f5bc70839735c640cd8539214bf4ff3fd08f0e445385a26a93151
- SSDEEP 49152:CXxi+HZKc0k4xfAX5a57xpzZHm4ZB/s8xXb0OXFz9wvJpGVb:C30/ZHvZJsgVrwvJpG
- TLSH T1D716BED566409321D79D10B4A2ADBAE6DB2A5E20031B70FB1F9CD87457134FFA268FC2
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
7/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-06-25_455dafb26873cc52035a7fee3f1381a6_amadey_elex_glassworm_luca-stealer_njrat_smoke-loader.exe
Resource
win10v2004-20260513-en
8 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-06-25_455dafb26873cc52035a7fee3f1381a6_amadey_elex_glassworm_luca-stealer_njrat_smoke-loader.exe
Resource
win11ltsc2024-20260629-en
7 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-06-25_455dafb26873cc52035a7fee3f1381a6_amadey_elex_glassworm_luca-stealer_njrat_smoke-loader
- Size 4.0MB
- SHA256 b57dece63545898bb632d3744bf58c67a5b93c0f048a13b6974ef71c42fee3c2
- MD5 455dafb26873cc52035a7fee3f1381a6
- SHA1 9dfed861e315516e33f2a5c17faf780dd46ff82f
- SHA512 51f06c030617f3c296f227aac49c58c32b27234f051dc2e7d4f030a6c4c4956ac2de1dbf810f5bc70839735c640cd8539214bf4ff3fd08f0e445385a26a93151
- SSDEEP 49152:CXxi+HZKc0k4xfAX5a57xpzZHm4ZB/s8xXb0OXFz9wvJpGVb:C30/ZHvZJsgVrwvJpG
- TLSH T1D716BED566409321D79D10B4A2ADBAE6DB2A5E20031B70FB1F9CD87457134FFA268FC2
- MD5 SHA1 SHA512 SSDEEP TLSH
Score7/10Checks computer location settings
Looks up country code configured in the registry, likely geofence.
Drops startup file
Executes dropped EXE