General
- Target 2026-07-04_2f449e21b54396b919ce1ba71bf7534c_amadey_elex_glassworm_luca-stealer_lynx_njrat
- Size 2.1MB
- Sample260704-x2f88scw41
- SHA256 7a349433207571e823d987bd9b0d87bcee55ab0a2f22fd77517b3e62e236ae31
- MD5 2f449e21b54396b919ce1ba71bf7534c
- SHA1 32b351398256e9c1bca1d8d5c1adecdda8db24c7
- SHA512 ebf5b0fd8822238032c6ee29178495d73480e9f87de705392805cbd18aababce33e46a1af562b2e1984084c5fb5160e8969b985a0adb57d068f59a7f29554820
- SSDEEP 49152:L+pg5G4M7Z9lrChL+s8KuqGaX0ToIBAUZLYlxP:L+pn99lrDJBAUZLAP
- TLSH T1FDA5DF7EFA91FA2BEA2B82B048614B75E45EFC900B7906533F583B8EDD3DAE1544C411
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
8/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-07-04_2f449e21b54396b919ce1ba71bf7534c_amadey_elex_glassworm_luca-stealer_lynx_njrat.exe
Resource
win10v2004-20260513-en
2 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-07-04_2f449e21b54396b919ce1ba71bf7534c_amadey_elex_glassworm_luca-stealer_lynx_njrat.exe
Resource
win11ltsc2024-20260629-en
15 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-07-04_2f449e21b54396b919ce1ba71bf7534c_amadey_elex_glassworm_luca-stealer_lynx_njrat
- Size 2.1MB
- SHA256 7a349433207571e823d987bd9b0d87bcee55ab0a2f22fd77517b3e62e236ae31
- MD5 2f449e21b54396b919ce1ba71bf7534c
- SHA1 32b351398256e9c1bca1d8d5c1adecdda8db24c7
- SHA512 ebf5b0fd8822238032c6ee29178495d73480e9f87de705392805cbd18aababce33e46a1af562b2e1984084c5fb5160e8969b985a0adb57d068f59a7f29554820
- SSDEEP 49152:L+pg5G4M7Z9lrChL+s8KuqGaX0ToIBAUZLYlxP:L+pn99lrDJBAUZLAP
- TLSH T1FDA5DF7EFA91FA2BEA2B82B048614B75E45EFC900B7906533F583B8EDD3DAE1544C411
- MD5 SHA1 SHA512 SSDEEP TLSH
Score8/10-
Boot or Logon Autostart Execution: Active Setup
Adversaries may achieve persistence by adding a Registry key to the Active Setup of the local machine.
-
Enumerates connected drives
Attempts to read the root path of hard drives other than the default C: drive.