General
- Target 2026-07-05_3039c46761a3f3bdeba1449184391790_amadey_elex_glassworm_luca-stealer_njrat_smoke-loader
- Size 2.7MB
- Sample260705-trhsjady9w
- SHA256 485d7924141bdc5865e8dc9c2e2f3736840c35564ef9764145c15b6037b41daf
- MD5 3039c46761a3f3bdeba1449184391790
- SHA1 bd0e945e0cb29c9e3d5bf738987a7311a7ccfb0d
- SHA512 358786c64a41164afc31a6dcb9013f2f3d523f1ccfd61b612bdaf4d80f6d814df02b13fa0ff3b6f0af34a5486a49a028b6238ad70f473abbc1d256ec29bdedd9
- SSDEEP 49152:bxaLOLtsUEl4L8ZR3wayynZS9YPITIbjl2B7Ulw:brLt0l4L8fwayynZoeko
- TLSH T143D5AF127746ACB3E4720530E37F97FBC63D99205325C5DBA3D01A6889282D3773AB96
- MD5 SHA1 SHA512 SSDEEP TLSH
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-07-05_3039c46761a3f3bdeba1449184391790_amadey_elex_glassworm_luca-stealer_njrat_smoke-loader.exe
Resource
win10v2004-20260513-en
11 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-07-05_3039c46761a3f3bdeba1449184391790_amadey_elex_glassworm_luca-stealer_njrat_smoke-loader
- Size 2.7MB
- SHA256 485d7924141bdc5865e8dc9c2e2f3736840c35564ef9764145c15b6037b41daf
- MD5 3039c46761a3f3bdeba1449184391790
- SHA1 bd0e945e0cb29c9e3d5bf738987a7311a7ccfb0d
- SHA512 358786c64a41164afc31a6dcb9013f2f3d523f1ccfd61b612bdaf4d80f6d814df02b13fa0ff3b6f0af34a5486a49a028b6238ad70f473abbc1d256ec29bdedd9
- SSDEEP 49152:bxaLOLtsUEl4L8ZR3wayynZS9YPITIbjl2B7Ulw:brLt0l4L8fwayynZoeko
- TLSH T143D5AF127746ACB3E4720530E37F97FBC63D99205325C5DBA3D01A6889282D3773AB96
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Checks installed software on the system
Looks up Uninstall key entries in the registry to enumerate software on the system.
MITRE ATT&CK Enterprise v16
Credential Access
Credentials from Password Stores
1Credentials from Web Browsers
1Unsecured Credentials
1Credentials In Files
1