General
- Target 2026-06-25_249361dcbd52c50bd1b4410380fe7f1b_amadey_elex_glassworm_luca-stealer_njrat_smoke-loader
- Size 4.0MB
- Sample260629-3ley5aay7p
- SHA256 c333dbf1cf84db4c9542dbe4c8583b6a2029618b368c117d4f00c8e49668d836
- MD5 249361dcbd52c50bd1b4410380fe7f1b
- SHA1 4b9018d3fb832486a3ffad251f849b179edf3d44
- SHA512 54de41c896c316a25557e1d21b9f03055762820eff88c4c9c97fcde6cba0b49c2766c2ff9bb60e68851c4f967c784f5d700b6d9a9f3a0cdd9466ff9f257c9a58
- SSDEEP 49152:z0OXFz9wvJpGVby2u/jvzMPnO2EsM9cKVO9i:zVrwvJpGCvqnIiKO9i
- TLSH T18216BEE26D41D073E0A31338B175AA7ACF387523371896C35E9319696A6CCD1AEF360D
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
7/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-06-25_249361dcbd52c50bd1b4410380fe7f1b_amadey_elex_glassworm_luca-stealer_njrat_smoke-loader.exe
Resource
win10v2004-20260513-en
8 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-06-25_249361dcbd52c50bd1b4410380fe7f1b_amadey_elex_glassworm_luca-stealer_njrat_smoke-loader.exe
Resource
win11ltsc2024-20260629-en
7 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-06-25_249361dcbd52c50bd1b4410380fe7f1b_amadey_elex_glassworm_luca-stealer_njrat_smoke-loader
- Size 4.0MB
- SHA256 c333dbf1cf84db4c9542dbe4c8583b6a2029618b368c117d4f00c8e49668d836
- MD5 249361dcbd52c50bd1b4410380fe7f1b
- SHA1 4b9018d3fb832486a3ffad251f849b179edf3d44
- SHA512 54de41c896c316a25557e1d21b9f03055762820eff88c4c9c97fcde6cba0b49c2766c2ff9bb60e68851c4f967c784f5d700b6d9a9f3a0cdd9466ff9f257c9a58
- SSDEEP 49152:z0OXFz9wvJpGVby2u/jvzMPnO2EsM9cKVO9i:zVrwvJpGCvqnIiKO9i
- TLSH T18216BEE26D41D073E0A31338B175AA7ACF387523371896C35E9319696A6CCD1AEF360D
- MD5 SHA1 SHA512 SSDEEP TLSH
Score7/10-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Drops startup file
-
Executes dropped EXE