General
- Target 2026-07-06_5f6027eaddfa766622ba49ef8ceff787_amadey_elex_glassworm_luca-stealer_njrat_smoke-loader
- Size 2.7MB
- Sample260706-ws7t6aez2r
- SHA256 a925a5e409efdf9db30f28b192740a878797896237d2704b1493290639752aca
- MD5 5f6027eaddfa766622ba49ef8ceff787
- SHA1 0a700e49c3b5f6e34c062a3162c060d688f6045c
- SHA512 38c18c2142e85a8ce3859752ff8efb729e3450468308bef9f9bface8af14a459fabafbc9158dab4672a98a071f191b516c7fb11986bc1ee2c2c1676055a468df
- SSDEEP 49152:p9TTNgUr3sz6NVFlAC+9ye298Dt4Q+sYPtTFqjl2B7Ulw:pTgUbsz6NhAC+9ye29KFko
- TLSH T103D5AF127746ACB3E4720930E37F97FBC62D99205725C5C7A3D016688D282D3B73AB96
- MD5 SHA1 SHA512 SSDEEP TLSH
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-07-06_5f6027eaddfa766622ba49ef8ceff787_amadey_elex_glassworm_luca-stealer_njrat_smoke-loader.exe
Resource
win10v2004-20260513-en
11 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-07-06_5f6027eaddfa766622ba49ef8ceff787_amadey_elex_glassworm_luca-stealer_njrat_smoke-loader
- Size 2.7MB
- SHA256 a925a5e409efdf9db30f28b192740a878797896237d2704b1493290639752aca
- MD5 5f6027eaddfa766622ba49ef8ceff787
- SHA1 0a700e49c3b5f6e34c062a3162c060d688f6045c
- SHA512 38c18c2142e85a8ce3859752ff8efb729e3450468308bef9f9bface8af14a459fabafbc9158dab4672a98a071f191b516c7fb11986bc1ee2c2c1676055a468df
- SSDEEP 49152:p9TTNgUr3sz6NVFlAC+9ye298Dt4Q+sYPtTFqjl2B7Ulw:pTgUbsz6NhAC+9ye29KFko
- TLSH T103D5AF127746ACB3E4720930E37F97FBC62D99205725C5C7A3D016688D282D3B73AB96
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Checks installed software on the system
Looks up Uninstall key entries in the registry to enumerate software on the system.
MITRE ATT&CK Enterprise v16
Credential Access
Credentials from Password Stores
1Credentials from Web Browsers
1Unsecured Credentials
1Credentials In Files
1