General
- Target 2026-06-27_2dd782511be21d2f78c4ac5e093f0747_amadey_elex_glassworm_luca-stealer_njrat_smoke-loader
- Size 4.0MB
- Sample260629-krt15abs8k
- SHA256 e3f3be8210ea02223eb005261f7cfa57071d50d8d2e08f950a0190d34e550539
- MD5 2dd782511be21d2f78c4ac5e093f0747
- SHA1 ac67edf3fceddf451afb21fd34301a440b1921d2
- SHA512 9c94279ba9ad22541e689accadad7ffc926b874aa3497cd49a2d007f8671cc7d2e57cffd60ce4800646cbe0efdbaf95e2561e63d6c8b8201427ee578ede70d17
- SSDEEP 49152:W0OXFz9wvJpGVbIal67V8xoDYYrjTAc/Yx+3fE7:WVrwvJpGt6rTAc/7E7
- TLSH T17316ACE17D0ED4B2F3B3D0B0A0AA662EDA7B5531D33538F7179810655AF13F2262CA19
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
7/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-06-27_2dd782511be21d2f78c4ac5e093f0747_amadey_elex_glassworm_luca-stealer_njrat_smoke-loader.exe
Resource
win10v2004-20260513-en
8 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-06-27_2dd782511be21d2f78c4ac5e093f0747_amadey_elex_glassworm_luca-stealer_njrat_smoke-loader.exe
Resource
win11ltsc2024-20260618-en
7 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-06-27_2dd782511be21d2f78c4ac5e093f0747_amadey_elex_glassworm_luca-stealer_njrat_smoke-loader
- Size 4.0MB
- SHA256 e3f3be8210ea02223eb005261f7cfa57071d50d8d2e08f950a0190d34e550539
- MD5 2dd782511be21d2f78c4ac5e093f0747
- SHA1 ac67edf3fceddf451afb21fd34301a440b1921d2
- SHA512 9c94279ba9ad22541e689accadad7ffc926b874aa3497cd49a2d007f8671cc7d2e57cffd60ce4800646cbe0efdbaf95e2561e63d6c8b8201427ee578ede70d17
- SSDEEP 49152:W0OXFz9wvJpGVbIal67V8xoDYYrjTAc/Yx+3fE7:WVrwvJpGt6rTAc/7E7
- TLSH T17316ACE17D0ED4B2F3B3D0B0A0AA662EDA7B5531D33538F7179810655AF13F2262CA19
- MD5 SHA1 SHA512 SSDEEP TLSH
Score7/10-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Drops startup file
-
Executes dropped EXE