General
- Target 2026-07-02_e190a0ee0ffd5db0e64c2912f8d6f4de_amadey_elex_glassworm_luca-stealer_njrat_smoke-loader
- Size 4.0MB
- Sample260702-2chg8afx5s
- SHA256 f54b9dfca2df579fa14d779353bf47814136c7c72109e776216b35fac14dfcd1
- MD5 e190a0ee0ffd5db0e64c2912f8d6f4de
- SHA1 9c7baa835a5ff7df3cf51aff21cc1ccd7cb62d0e
- SHA512 805381400d80f84568ceec14e88665d81f6b19345fcbed07881fb268903e18fd423e5d52fb87912009d9e0b7c9a38fbe68f57fc30fc49fbf1740d9b62aabe2d4
- SSDEEP 49152:Xi2GBnoAmboppKQzuvEC+dh/X0JkOP4EnLGI0OXFz9wvJpGVb:oitoppiIdhPukOAoGIVrwvJpG
- TLSH T1A0167A1267FEAB31E762F0B4B0E58A2DDB3C72246A9050DF5E603372D95A3D23B24715
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
7/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-07-02_e190a0ee0ffd5db0e64c2912f8d6f4de_amadey_elex_glassworm_luca-stealer_njrat_smoke-loader.exe
Resource
win10v2004-20260513-en
8 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-07-02_e190a0ee0ffd5db0e64c2912f8d6f4de_amadey_elex_glassworm_luca-stealer_njrat_smoke-loader.exe
Resource
win11ltsc2024-20260629-en
7 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-07-02_e190a0ee0ffd5db0e64c2912f8d6f4de_amadey_elex_glassworm_luca-stealer_njrat_smoke-loader
- Size 4.0MB
- SHA256 f54b9dfca2df579fa14d779353bf47814136c7c72109e776216b35fac14dfcd1
- MD5 e190a0ee0ffd5db0e64c2912f8d6f4de
- SHA1 9c7baa835a5ff7df3cf51aff21cc1ccd7cb62d0e
- SHA512 805381400d80f84568ceec14e88665d81f6b19345fcbed07881fb268903e18fd423e5d52fb87912009d9e0b7c9a38fbe68f57fc30fc49fbf1740d9b62aabe2d4
- SSDEEP 49152:Xi2GBnoAmboppKQzuvEC+dh/X0JkOP4EnLGI0OXFz9wvJpGVb:oitoppiIdhPukOAoGIVrwvJpG
- TLSH T1A0167A1267FEAB31E762F0B4B0E58A2DDB3C72246A9050DF5E603372D95A3D23B24715
- MD5 SHA1 SHA512 SSDEEP TLSH
Score7/10-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Drops startup file
-
Executes dropped EXE