General
- Target 2026-07-01_1d105519426df07eed61464921fa91b2_amadey_elex_glassworm_luca-stealer_njrat_remcos_smoke-loader
- Size 354KB
- Sample260701-2c6j2sg15s
- SHA256 8ebf29d70c5b60edda7e8bef4878b1d7f3a83edb5a6c3ca2930ebc94d0bb8b68
- MD5 1d105519426df07eed61464921fa91b2
- SHA1 8dc6dd252d8ea20f3e7cebf06a4c703bb55b6a20
- SHA512 df3c7d6e70883afa23c7c32451375aee145f8e3af2705f0cf70b3e86dc96524d607d7b4ed120bc58bec8b0f623e4dc19477dae0f33341a42259b026415dba8d8
- SSDEEP 6144:XQ8/2VvPOaz5LIzLtZt1PxzrTwAOoTB5Y2Ja9x3HL7zx:T/Chz5czLna6THY2JOxb7zx
- TLSH T1CA749D1171C188F2C47201714CEBB739592FB92F0F218DEB6F9A27295DA42D16A316EF
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
10/10
Behavioral task
behavioral1
Sample
2026-07-01_1d105519426df07eed61464921fa91b2_amadey_elex_glassworm_luca-stealer_njrat_remcos_smoke-loader.exe
Resource
win10v2004-20260513-en
8 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-07-01_1d105519426df07eed61464921fa91b2_amadey_elex_glassworm_luca-stealer_njrat_remcos_smoke-loader.exe
Resource
win11ltsc2024-20260629-en
8 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-07-01_1d105519426df07eed61464921fa91b2_amadey_elex_glassworm_luca-stealer_njrat_remcos_smoke-loader
- Size 354KB
- SHA256 8ebf29d70c5b60edda7e8bef4878b1d7f3a83edb5a6c3ca2930ebc94d0bb8b68
- MD5 1d105519426df07eed61464921fa91b2
- SHA1 8dc6dd252d8ea20f3e7cebf06a4c703bb55b6a20
- SHA512 df3c7d6e70883afa23c7c32451375aee145f8e3af2705f0cf70b3e86dc96524d607d7b4ed120bc58bec8b0f623e4dc19477dae0f33341a42259b026415dba8d8
- SSDEEP 6144:XQ8/2VvPOaz5LIzLtZt1PxzrTwAOoTB5Y2Ja9x3HL7zx:T/Chz5czLna6THY2JOxb7zx
- TLSH T1CA749D1171C188F2C47201714CEBB739592FB92F0F218DEB6F9A27295DA42D16A316EF
- MD5 SHA1 SHA512 SSDEEP TLSH
Score10/10-
Modifies WinLogon for persistence
-
Detects executables packed with ASPack
-
Executes dropped EXE