General
- Target 2026-07-08_370c7f393e180ce1f0021eacfd06b750_amadey_elex_glassworm_njrat_smoke-loader
- Size 2.8MB
- Sample260708-c91bvsax4l
- SHA256 bf6559d5878b4b36dd1eb01b94bfad9692078c0b1b705dab8be4380a2041c97a
- MD5 370c7f393e180ce1f0021eacfd06b750
- SHA1 c528c528dac7cb3ee19f26141ae7569244c0d89e
- SHA512 81c23561198a7e31c9fd012743c4bb1877eb91d91fe7a8203020feed6edaf44fcbb394abf29a892e46fd708771339508ae64913b5c454eb19868647884b79ef1
- SSDEEP 49152:+oa1taC070UhFn6deTFwV0noVBqBFCnjZaBQvV:+oa1taC05nhR9oVBqc
- TLSH T17ED5BE57EB818AE8E64D09766F584150D62EF221AB4F235178AC530DCF8378B8F61E3D
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
8/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-07-08_370c7f393e180ce1f0021eacfd06b750_amadey_elex_glassworm_njrat_smoke-loader.exe
Resource
win10v2004-20260513-en
4 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-07-08_370c7f393e180ce1f0021eacfd06b750_amadey_elex_glassworm_njrat_smoke-loader.exe
Resource
win11ltsc2024-20260706-en
17 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-07-08_370c7f393e180ce1f0021eacfd06b750_amadey_elex_glassworm_njrat_smoke-loader
- Size 2.8MB
- SHA256 bf6559d5878b4b36dd1eb01b94bfad9692078c0b1b705dab8be4380a2041c97a
- MD5 370c7f393e180ce1f0021eacfd06b750
- SHA1 c528c528dac7cb3ee19f26141ae7569244c0d89e
- SHA512 81c23561198a7e31c9fd012743c4bb1877eb91d91fe7a8203020feed6edaf44fcbb394abf29a892e46fd708771339508ae64913b5c454eb19868647884b79ef1
- SSDEEP 49152:+oa1taC070UhFn6deTFwV0noVBqBFCnjZaBQvV:+oa1taC05nhR9oVBqc
- TLSH T17ED5BE57EB818AE8E64D09766F584150D62EF221AB4F235178AC530DCF8378B8F61E3D
- MD5 SHA1 SHA512 SSDEEP TLSH
Score8/10-
Boot or Logon Autostart Execution: Active Setup
Adversaries may achieve persistence by adding a Registry key to the Active Setup of the local machine.
-
Deletes itself
-
Executes dropped EXE
-
Enumerates connected drives
Attempts to read the root path of hard drives other than the default C: drive.