General
- Target 2026-07-06_e3d95a63b4669738f505e2a323d1741f_amadey_elex_glassworm_luca-stealer_njrat_smoke-loader
- Size 4.0MB
- Sample260706-v32v8aas9t
- SHA256 498b2b416e0f3220372b7e3e830509d3cad5826ca2b6060323584b715d8439bf
- MD5 e3d95a63b4669738f505e2a323d1741f
- SHA1 decc79bb625aac96ccd3ad1861bd995ef17e8196
- SHA512 207ee2d605389c1ea2522ba90dce8da580c86cdfa5691e382316833fd33b74d2d6b85854498fcb8c8d2b5aad250c972a5cd755753a55d219f396e5e0cf7158ac
- SSDEEP 49152:UUGo/OYvyuidCEFdWMZsbrmq/0OXFz9wvJpGVb:jGnjkMSl/VrwvJpG
- TLSH T1DA16CF15AB60C732E281FC3490E5CE692B3C9D64232DC9D7568403EADEE18D1EE376C9
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
7/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-07-06_e3d95a63b4669738f505e2a323d1741f_amadey_elex_glassworm_luca-stealer_njrat_smoke-loader.exe
Resource
win10v2004-20260513-en
8 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-07-06_e3d95a63b4669738f505e2a323d1741f_amadey_elex_glassworm_luca-stealer_njrat_smoke-loader.exe
Resource
win11ltsc2024-20260629-en
7 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-07-06_e3d95a63b4669738f505e2a323d1741f_amadey_elex_glassworm_luca-stealer_njrat_smoke-loader
- Size 4.0MB
- SHA256 498b2b416e0f3220372b7e3e830509d3cad5826ca2b6060323584b715d8439bf
- MD5 e3d95a63b4669738f505e2a323d1741f
- SHA1 decc79bb625aac96ccd3ad1861bd995ef17e8196
- SHA512 207ee2d605389c1ea2522ba90dce8da580c86cdfa5691e382316833fd33b74d2d6b85854498fcb8c8d2b5aad250c972a5cd755753a55d219f396e5e0cf7158ac
- SSDEEP 49152:UUGo/OYvyuidCEFdWMZsbrmq/0OXFz9wvJpGVb:jGnjkMSl/VrwvJpG
- TLSH T1DA16CF15AB60C732E281FC3490E5CE692B3C9D64232DC9D7568403EADEE18D1EE376C9
- MD5 SHA1 SHA512 SSDEEP TLSH
Score7/10-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Drops startup file
-
Executes dropped EXE