General
- Target 2026-07-04_4f842462c392f8defd25efdfeb684c14_amadey_elex_glassworm_njrat_smoke-loader
- Size 4.2MB
- Sample260704-swtj6ac12q
- SHA256 fe04761ecd51c1aec58a67d40e5c9777f7c95e252ac0563a14bdc34d40d8c897
- MD5 4f842462c392f8defd25efdfeb684c14
- SHA1 b5bd783aa90cc1dbb0b90bed8f823265e50b851e
- SHA512 2e57e580c93afb6849450f5506e23a1a9853d3578099cf70663eb25199e5c8eb605d98ac8a362fe69bb4b7bb8bf983d5b1680d18bd33b1fd6503599e3c6e0f70
- SSDEEP 98304:Boa1taC0guma+QiaN5nLrHp/qKm2/Sb/gq:Boa3sTTNJrRb/G
- TLSH T1F816DF57EB818AE8F68D08376B584150DA2EF226A74F2351796C420DDF873878F61E3D
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
8/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-07-04_4f842462c392f8defd25efdfeb684c14_amadey_elex_glassworm_njrat_smoke-loader.exe
Resource
win10v2004-20260513-en
4 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-07-04_4f842462c392f8defd25efdfeb684c14_amadey_elex_glassworm_njrat_smoke-loader.exe
Resource
win11ltsc2024-20260629-en
17 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-07-04_4f842462c392f8defd25efdfeb684c14_amadey_elex_glassworm_njrat_smoke-loader
- Size 4.2MB
- SHA256 fe04761ecd51c1aec58a67d40e5c9777f7c95e252ac0563a14bdc34d40d8c897
- MD5 4f842462c392f8defd25efdfeb684c14
- SHA1 b5bd783aa90cc1dbb0b90bed8f823265e50b851e
- SHA512 2e57e580c93afb6849450f5506e23a1a9853d3578099cf70663eb25199e5c8eb605d98ac8a362fe69bb4b7bb8bf983d5b1680d18bd33b1fd6503599e3c6e0f70
- SSDEEP 98304:Boa1taC0guma+QiaN5nLrHp/qKm2/Sb/gq:Boa3sTTNJrRb/G
- TLSH T1F816DF57EB818AE8F68D08376B584150DA2EF226A74F2351796C420DDF873878F61E3D
- MD5 SHA1 SHA512 SSDEEP TLSH
Score8/10-
Boot or Logon Autostart Execution: Active Setup
Adversaries may achieve persistence by adding a Registry key to the Active Setup of the local machine.
-
Deletes itself
-
Executes dropped EXE
-
Enumerates connected drives
Attempts to read the root path of hard drives other than the default C: drive.