General
- Target 2026-07-06_f8ffb2c84900fbb2ce82b6e6ac2ff5c2_amadey_elex_glassworm_luca-stealer_lynx_njrat
- Size 5.1MB
- Sample260706-pv82nsbs2l
- SHA256 13e0a9da59790e9f0e9f696a2cad0e6f4dc98c8e74672c6dbe9275bf2295c393
- MD5 f8ffb2c84900fbb2ce82b6e6ac2ff5c2
- SHA1 d71962c723e0c26da9770adf0ba1347266a54880
- SHA512 e6a7aba25ae4a1bdea86779b0d65931e1fa4f3fcb36cccf1ff94c8205625196d9a913ecdc4e894ce83c8b0df9f76baacc43b4e4d740ad0f0ed3353053e2e2e7d
- SSDEEP 98304:WUAE59jvgsJEMiVfDzYSnCAKC75iYElhX0WzZZvAVOD527BWG:vjvgBn0SnCAZ5avFVQBWG
- TLSH T1F736EF11AE3C9062F521463D4A5E9573C5BBBBECB71F019322B42A7B5B23780992D733
- MD5 SHA1 SHA512 SSDEEP TLSH
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-07-06_f8ffb2c84900fbb2ce82b6e6ac2ff5c2_amadey_elex_glassworm_luca-stealer_lynx_njrat.exe
Resource
win10v2004-20260513-en
9 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-07-06_f8ffb2c84900fbb2ce82b6e6ac2ff5c2_amadey_elex_glassworm_luca-stealer_lynx_njrat.exe
Resource
win11ltsc2024-20260630-en
9 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-07-06_f8ffb2c84900fbb2ce82b6e6ac2ff5c2_amadey_elex_glassworm_luca-stealer_lynx_njrat
- Size 5.1MB
- SHA256 13e0a9da59790e9f0e9f696a2cad0e6f4dc98c8e74672c6dbe9275bf2295c393
- MD5 f8ffb2c84900fbb2ce82b6e6ac2ff5c2
- SHA1 d71962c723e0c26da9770adf0ba1347266a54880
- SHA512 e6a7aba25ae4a1bdea86779b0d65931e1fa4f3fcb36cccf1ff94c8205625196d9a913ecdc4e894ce83c8b0df9f76baacc43b4e4d740ad0f0ed3353053e2e2e7d
- SSDEEP 98304:WUAE59jvgsJEMiVfDzYSnCAKC75iYElhX0WzZZvAVOD527BWG:vjvgBn0SnCAZ5avFVQBWG
- TLSH T1F736EF11AE3C9062F521463D4A5E9573C5BBBBECB71F019322B42A7B5B23780992D733
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Executes dropped EXE
-
Loads dropped DLL
-
Checks for any installed AV software in registry
-
Checks whether UAC is enabled
-
Writes to the Master Boot Record (MBR)
Bootkits write to the MBR to gain persistence at a level below the operating system.