General
- Target 2026-06-26_5cf22efc44d00d9f338b420f0fb45b10_amadey_elex_glassworm_luca-stealer_njrat_smoke-loader
- Size 4.0MB
- Sample260629-s6b3vsgz6z
- SHA256 e0f6d99d2324708df558bd0db3f55ec7a6c932d222ac01a379664c8bcefa2ee9
- MD5 5cf22efc44d00d9f338b420f0fb45b10
- SHA1 04297030a512bc768c6e676ef9316125c46b7558
- SHA512 cf1f42eb4d2c40543fca02dafa8e3736e63af5f4f93205ae54569b6bf8c249466258a18cf677c2c1f4879039cc57ec4f328096eeb7fabcb34b87fc6eac4fd751
- SSDEEP 49152:90OXFz9wvJpGVbzXTlrT54tMQB9oWXX0zN7pL7:9VrwvJpGPT54aQB9bXu7p
- TLSH T1C316BDF36191D321E1824C35D16DCA7D4A3C5618F31EA2D753D864AAB7E00D2EBF922E
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
7/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-06-26_5cf22efc44d00d9f338b420f0fb45b10_amadey_elex_glassworm_luca-stealer_njrat_smoke-loader.exe
Resource
win10v2004-20260513-en
8 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-06-26_5cf22efc44d00d9f338b420f0fb45b10_amadey_elex_glassworm_luca-stealer_njrat_smoke-loader.exe
Resource
win11ltsc2024-20260629-en
7 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-06-26_5cf22efc44d00d9f338b420f0fb45b10_amadey_elex_glassworm_luca-stealer_njrat_smoke-loader
- Size 4.0MB
- SHA256 e0f6d99d2324708df558bd0db3f55ec7a6c932d222ac01a379664c8bcefa2ee9
- MD5 5cf22efc44d00d9f338b420f0fb45b10
- SHA1 04297030a512bc768c6e676ef9316125c46b7558
- SHA512 cf1f42eb4d2c40543fca02dafa8e3736e63af5f4f93205ae54569b6bf8c249466258a18cf677c2c1f4879039cc57ec4f328096eeb7fabcb34b87fc6eac4fd751
- SSDEEP 49152:90OXFz9wvJpGVbzXTlrT54tMQB9oWXX0zN7pL7:9VrwvJpGPT54aQB9bXu7p
- TLSH T1C316BDF36191D321E1824C35D16DCA7D4A3C5618F31EA2D753D864AAB7E00D2EBF922E
- MD5 SHA1 SHA512 SSDEEP TLSH
Score7/10-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Drops startup file
-
Executes dropped EXE