General
- Target 2026-07-02_5589000cd074daf9b600d089d8fbb3fd_amadey_elex_glassworm_luca-stealer_njrat_smoke-loader
- Size 1.8MB
- Sample260702-2sca5scy4p
- SHA256 da000493ee63f54884b9fce4527646fded0a578987b982e1e22ba96d4664dac7
- MD5 5589000cd074daf9b600d089d8fbb3fd
- SHA1 c7deb576b631ccb618aa9fd1c99bfe6cc6ac46d4
- SHA512 1d14a4032af3166c278251d678a0f57b9e8e4f981d1f4b7160486d52e76ac316b7ba220457319cd12397be5b52c96a90f3683d49eb46ad53628c7905fe90f83c
- SSDEEP 49152:6ZdSfC5qBQQQ+pu8AvfSkYjZd6c0OXFz9wvJpGVb:62qOu8AvakYf6cVrwvJpG
- TLSH T1B495E02DBD41D862F0930075D1BF87764A3D6930D32561DB5B9E80ACFBE60D2223E69B
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
7/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-07-02_5589000cd074daf9b600d089d8fbb3fd_amadey_elex_glassworm_luca-stealer_njrat_smoke-loader.exe
Resource
win10v2004-20260513-en
8 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-07-02_5589000cd074daf9b600d089d8fbb3fd_amadey_elex_glassworm_luca-stealer_njrat_smoke-loader.exe
Resource
win11ltsc2024-20260629-en
7 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-07-02_5589000cd074daf9b600d089d8fbb3fd_amadey_elex_glassworm_luca-stealer_njrat_smoke-loader
- Size 1.8MB
- SHA256 da000493ee63f54884b9fce4527646fded0a578987b982e1e22ba96d4664dac7
- MD5 5589000cd074daf9b600d089d8fbb3fd
- SHA1 c7deb576b631ccb618aa9fd1c99bfe6cc6ac46d4
- SHA512 1d14a4032af3166c278251d678a0f57b9e8e4f981d1f4b7160486d52e76ac316b7ba220457319cd12397be5b52c96a90f3683d49eb46ad53628c7905fe90f83c
- SSDEEP 49152:6ZdSfC5qBQQQ+pu8AvfSkYjZd6c0OXFz9wvJpGVb:62qOu8AvakYf6cVrwvJpG
- TLSH T1B495E02DBD41D862F0930075D1BF87764A3D6930D32561DB5B9E80ACFBE60D2223E69B
- MD5 SHA1 SHA512 SSDEEP TLSH
Score7/10-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Drops startup file
-
Executes dropped EXE