General
- Target 2026-06-29_d26edf8c8c64596e776358dbd1f91526_amadey_elex_glassworm_jeefo_luca-stealer_magniber_njrat_remcos
- Size 1.7MB
- Sample260630-dn88bad12m
- SHA256 94ce9502ee439292d16535a88504013d1631a21ed04a6f8efca2283303aa47aa
- MD5 d26edf8c8c64596e776358dbd1f91526
- SHA1 9ce722524bca6039981fedb7afbba32c5316396c
- SHA512 1e80da92e29fd255bbb3dc9c258ca1635453f08016515cd92d5e0327f79c805732c76fb79aa1dd8489f6015927683054f1f90e2744811e13534e36994a725dc9
- SSDEEP 49152:F3nwdwnegFJZ1wybyRuLc2EJlZ/rek9v4zF6:RnwdwnegbLyRMcvZLvcF6
- TLSH T13385BE307A46C13BD49B05B2696CDFAB8A2DE9304B6144C7B3E05F6E9D205C22B35B77
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
7/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-06-29_d26edf8c8c64596e776358dbd1f91526_amadey_elex_glassworm_jeefo_luca-stealer_magniber_njrat_remcos.exe
Resource
win10v2004-20260513-en
14 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-06-29_d26edf8c8c64596e776358dbd1f91526_amadey_elex_glassworm_jeefo_luca-stealer_magniber_njrat_remcos.exe
Resource
win11ltsc2024-20260629-en
14 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-06-29_d26edf8c8c64596e776358dbd1f91526_amadey_elex_glassworm_jeefo_luca-stealer_magniber_njrat_remcos
- Size 1.7MB
- SHA256 94ce9502ee439292d16535a88504013d1631a21ed04a6f8efca2283303aa47aa
- MD5 d26edf8c8c64596e776358dbd1f91526
- SHA1 9ce722524bca6039981fedb7afbba32c5316396c
- SHA512 1e80da92e29fd255bbb3dc9c258ca1635453f08016515cd92d5e0327f79c805732c76fb79aa1dd8489f6015927683054f1f90e2744811e13534e36994a725dc9
- SSDEEP 49152:F3nwdwnegFJZ1wybyRuLc2EJlZ/rek9v4zF6:RnwdwnegbLyRMcvZLvcF6
- TLSH T13385BE307A46C13BD49B05B2696CDFAB8A2DE9304B6144C7B3E05F6E9D205C22B35B77
- MD5 SHA1 SHA512 SSDEEP TLSH
Score7/10-
Executes dropped EXE
-
Loads dropped DLL
-
Writes to the Master Boot Record (MBR)
Bootkits write to the MBR to gain persistence at a level below the operating system.