General
- Target 2026-07-08_cbbc958c73c465ad7acd030d129e439d_amadey_blankgrabber_elex_glassworm_luca-stealer_njrat_remcos_smoke-loader
- Size 1.3MB
- Sample260708-3qb32aav5k
- SHA256 65c49f67f00718bf59d643f64516ed3ce94b880775be10531c01719d3881c90b
- MD5 cbbc958c73c465ad7acd030d129e439d
- SHA1 de2b2542d4df25cea1aa7bb0ce189beb2836fe0d
- SHA512 d3fb29373a9747396b145d9fd749d0dde2480054b251af8a4d34572460c7cb54ed559a1a60c879221422e057514fd33386aaad0a9312fe91350d9c74d8a7965e
- SSDEEP 24576:9u5x70pH/dyU5sWBAB0eSsVr6H5Ena+7RkneAeueuOL+YgLplk:My/dyfWBAJKH+naWunyiONYpa
- TLSH T10B55E0223DE1C03AC23361B0495DC798A67AF8714B365AC377CC66AE6F345C18F25B66
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
7/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-07-08_cbbc958c73c465ad7acd030d129e439d_amadey_blankgrabber_elex_glassworm_luca-stealer_njrat_remcos_smoke-loader.exe
Resource
win10v2004-20260513-en
15 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-07-08_cbbc958c73c465ad7acd030d129e439d_amadey_blankgrabber_elex_glassworm_luca-stealer_njrat_remcos_smoke-loader.exe
Resource
win11ltsc2024-20260706-en
1 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-07-08_cbbc958c73c465ad7acd030d129e439d_amadey_blankgrabber_elex_glassworm_luca-stealer_njrat_remcos_smoke-loader
- Size 1.3MB
- SHA256 65c49f67f00718bf59d643f64516ed3ce94b880775be10531c01719d3881c90b
- MD5 cbbc958c73c465ad7acd030d129e439d
- SHA1 de2b2542d4df25cea1aa7bb0ce189beb2836fe0d
- SHA512 d3fb29373a9747396b145d9fd749d0dde2480054b251af8a4d34572460c7cb54ed559a1a60c879221422e057514fd33386aaad0a9312fe91350d9c74d8a7965e
- SSDEEP 24576:9u5x70pH/dyU5sWBAB0eSsVr6H5Ena+7RkneAeueuOL+YgLplk:My/dyfWBAJKH+naWunyiONYpa
- TLSH T10B55E0223DE1C03AC23361B0495DC798A67AF8714B365AC377CC66AE6F345C18F25B66
- MD5 SHA1 SHA512 SSDEEP TLSH
Score7/10-
Executes dropped EXE
-
Drops file in System32 directory
MITRE ATT&CK Enterprise v16
Credential Access
Credentials from Password Stores
1Credentials from Web Browsers
1Unsecured Credentials
1Credentials In Files
1