General
- Target 2026-07-02_0a5b5850cab150feb9ff2cfb835dab53_amadey_elex_emotet_glassworm_luca-stealer_manuscrypt_njrat_redline-stealer_remcos_rhadamanthys_smoke-loader_stealc_stop
- Size 11.2MB
- Sample260702-1eezfacs3j
- SHA256 696471da5dcd12b8dafcbfc11fe59118e7edb633c7cd407724d8e619b7ae450f
- MD5 0a5b5850cab150feb9ff2cfb835dab53
- SHA1 8fdfd4d0819691f089f9a1951d4c41f885da7a5c
- SHA512 ae72b9ec593911e1e1ff021063ae44c8e473169b81f1333b5e4e7d1004164a60d113eae17c1534909b167c6efe68d074b005394343932f143ad987bd10f8976f
- SSDEEP 196608:6U1vF0cQeGZF6bUpMBPeGZF6bUpMBF1p/kjRm4OWi2bT:T1vFTEIbUwnIbUwF1VERmj2bT
- TLSH T19EC6131BB5E48035E06351700A75D2F122BABA60173881CBA3DF2E6D5EB62B17B353D7
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
10/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-07-02_0a5b5850cab150feb9ff2cfb835dab53_amadey_elex_emotet_glassworm_luca-stealer_manuscrypt_njr.exe
Resource
win10v2004-20260513-en
8 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-07-02_0a5b5850cab150feb9ff2cfb835dab53_amadey_elex_emotet_glassworm_luca-stealer_manuscrypt_njr.exe
Resource
win11ltsc2024-20260629-en
8 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-07-02_0a5b5850cab150feb9ff2cfb835dab53_amadey_elex_emotet_glassworm_luca-stealer_manuscrypt_njrat_redline-stealer_remcos_rhadamanthys_smoke-loader_stealc_stop
- Size 11.2MB
- SHA256 696471da5dcd12b8dafcbfc11fe59118e7edb633c7cd407724d8e619b7ae450f
- MD5 0a5b5850cab150feb9ff2cfb835dab53
- SHA1 8fdfd4d0819691f089f9a1951d4c41f885da7a5c
- SHA512 ae72b9ec593911e1e1ff021063ae44c8e473169b81f1333b5e4e7d1004164a60d113eae17c1534909b167c6efe68d074b005394343932f143ad987bd10f8976f
- SSDEEP 196608:6U1vF0cQeGZF6bUpMBPeGZF6bUpMBF1p/kjRm4OWi2bT:T1vFTEIbUwnIbUwF1VERmj2bT
- TLSH T19EC6131BB5E48035E06351700A75D2F122BABA60173881CBA3DF2E6D5EB62B17B353D7
- MD5 SHA1 SHA512 SSDEEP TLSH
Score10/10-
Modifies WinLogon for persistence
-
Adds Run key to start application
-
Drops file in System32 directory
MITRE ATT&CK Enterprise v16
Persistence
Boot or Logon Autostart Execution
2Registry Run Keys / Startup Folder
1Winlogon Helper DLL
1Privilege Escalation
Boot or Logon Autostart Execution
2Registry Run Keys / Startup Folder
1Winlogon Helper DLL
1