General
- Target 2026-06-26_64088c0150fd0330d028a328bb623a6f_amadey_elex_glassworm_luca-stealer_njrat_smoke-loader
- Size 4.0MB
- Sample260629-sydaysgx71
- SHA256 fa0aba94f2a9fec63e58ddd1bdca854a20f8fea81c4778cad47b8959766428a6
- MD5 64088c0150fd0330d028a328bb623a6f
- SHA1 3d2bf54f897357350661ac4d862b6cde9c659669
- SHA512 6a30bf6dfc2761b91b714064ae84d2b1a590242095a8b15b3f1cca8e91e7866fd7090b67f38e6535d9249437e485d6717658bfdc32fe4e9ab7ff63ffd1816eeb
- SSDEEP 24576:PA0tUXF2K2iMMfwoiJpGVFpOwOic9xS4/pI4RgRlRPAMzzJY0UN2k7YhZIZTw:o0OXFz9wvJpGVbXESwPWjopXYsq
- TLSH T1CB16C0357AF2406AF1A2047991A7DEBBEA3923E1133F94C767801A7C95640CF263E54F
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
7/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-06-26_64088c0150fd0330d028a328bb623a6f_amadey_elex_glassworm_luca-stealer_njrat_smoke-loader.exe
Resource
win10v2004-20260513-en
8 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-06-26_64088c0150fd0330d028a328bb623a6f_amadey_elex_glassworm_luca-stealer_njrat_smoke-loader.exe
Resource
win11ltsc2024-20260629-en
7 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-06-26_64088c0150fd0330d028a328bb623a6f_amadey_elex_glassworm_luca-stealer_njrat_smoke-loader
- Size 4.0MB
- SHA256 fa0aba94f2a9fec63e58ddd1bdca854a20f8fea81c4778cad47b8959766428a6
- MD5 64088c0150fd0330d028a328bb623a6f
- SHA1 3d2bf54f897357350661ac4d862b6cde9c659669
- SHA512 6a30bf6dfc2761b91b714064ae84d2b1a590242095a8b15b3f1cca8e91e7866fd7090b67f38e6535d9249437e485d6717658bfdc32fe4e9ab7ff63ffd1816eeb
- SSDEEP 24576:PA0tUXF2K2iMMfwoiJpGVFpOwOic9xS4/pI4RgRlRPAMzzJY0UN2k7YhZIZTw:o0OXFz9wvJpGVbXESwPWjopXYsq
- TLSH T1CB16C0357AF2406AF1A2047991A7DEBBEA3923E1133F94C767801A7C95640CF263E54F
- MD5 SHA1 SHA512 SSDEEP TLSH
Score7/10-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Drops startup file
-
Executes dropped EXE