General
- Target 2026-07-06_ffc138a2f4e59905e0ed2d92fda28db0_amadey_elex_glassworm_luca-stealer_njrat_smoke-loader
- Size 4.0MB
- Sample260706-vwfdmsh13s
- SHA256 a9b9454f245b5105cb250618531de971d61dad467c300a1db5298023e083cda9
- MD5 ffc138a2f4e59905e0ed2d92fda28db0
- SHA1 16e106ad9e58ae8a513b2f54d81fbf6f4d2398b8
- SHA512 590faa83a7427a47f4648a6588a560e03be7ec14533bca6f5b0a46f0847d4b57d14314c55952a85507126ebf716dde7cacfa51734a3237a4e87b51fcfc5e8afe
- SSDEEP 49152:L0OXFz9wvJpGVb3QU/1IfAi/MlO5OaDRaw1x848B9I6:LVrwvJpGBQG9i/MzaDRaw18/D
- TLSH T1F916D1786401B479D18200BE99EAB636D968EDBED3E4BBF786C43C794D6D8C11339E01
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
7/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-07-06_ffc138a2f4e59905e0ed2d92fda28db0_amadey_elex_glassworm_luca-stealer_njrat_smoke-loader.exe
Resource
win10v2004-20260513-en
8 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-07-06_ffc138a2f4e59905e0ed2d92fda28db0_amadey_elex_glassworm_luca-stealer_njrat_smoke-loader.exe
Resource
win11ltsc2024-20260706-en
7 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-07-06_ffc138a2f4e59905e0ed2d92fda28db0_amadey_elex_glassworm_luca-stealer_njrat_smoke-loader
- Size 4.0MB
- SHA256 a9b9454f245b5105cb250618531de971d61dad467c300a1db5298023e083cda9
- MD5 ffc138a2f4e59905e0ed2d92fda28db0
- SHA1 16e106ad9e58ae8a513b2f54d81fbf6f4d2398b8
- SHA512 590faa83a7427a47f4648a6588a560e03be7ec14533bca6f5b0a46f0847d4b57d14314c55952a85507126ebf716dde7cacfa51734a3237a4e87b51fcfc5e8afe
- SSDEEP 49152:L0OXFz9wvJpGVb3QU/1IfAi/MlO5OaDRaw1x848B9I6:LVrwvJpGBQG9i/MzaDRaw18/D
- TLSH T1F916D1786401B479D18200BE99EAB636D968EDBED3E4BBF786C43C794D6D8C11339E01
- MD5 SHA1 SHA512 SSDEEP TLSH
Score7/10-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Drops startup file
-
Executes dropped EXE