General
- Target 2026-07-10_d1db10a5d480ba369d4f58808e721248_amadey_elex_glassworm_luca-stealer_njrat_smoke-loader
- Size 4.0MB
- Sample260710-vsx5aafx81
- SHA256 f174289d52cd7a5942a5a77b844c5d4018082d0207b350ade0f9a36eff63a3a8
- MD5 d1db10a5d480ba369d4f58808e721248
- SHA1 f3c9d724476353ca4f20913784fd55f7ff91636b
- SHA512 5728f3459105e2a38997d3ed1a803f654bba0f9dc2d9c838471662b7a2973b3a3f4bab029864894bab5721b2564ebf0dceb3e3b6e8a00a713fac0547d4b56573
- SSDEEP 49152:RWp0knrHq/NmbFZUJHjpXgF4f0OXFz9wvJpGVb:RY4mbFZKVXA4fVrwvJpG
- TLSH T1BF16BE115841B372E9863D76FDA18A774A3CE2326BFD44EF2EA170A057740C127FAE52
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
7/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-07-10_d1db10a5d480ba369d4f58808e721248_amadey_elex_glassworm_luca-stealer_njrat_smoke-loader.exe
Resource
win10v2004-20260513-en
8 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-07-10_d1db10a5d480ba369d4f58808e721248_amadey_elex_glassworm_luca-stealer_njrat_smoke-loader.exe
Resource
win11ltsc2024-20260709-en
7 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-07-10_d1db10a5d480ba369d4f58808e721248_amadey_elex_glassworm_luca-stealer_njrat_smoke-loader
- Size 4.0MB
- SHA256 f174289d52cd7a5942a5a77b844c5d4018082d0207b350ade0f9a36eff63a3a8
- MD5 d1db10a5d480ba369d4f58808e721248
- SHA1 f3c9d724476353ca4f20913784fd55f7ff91636b
- SHA512 5728f3459105e2a38997d3ed1a803f654bba0f9dc2d9c838471662b7a2973b3a3f4bab029864894bab5721b2564ebf0dceb3e3b6e8a00a713fac0547d4b56573
- SSDEEP 49152:RWp0knrHq/NmbFZUJHjpXgF4f0OXFz9wvJpGVb:RY4mbFZKVXA4fVrwvJpG
- TLSH T1BF16BE115841B372E9863D76FDA18A774A3CE2326BFD44EF2EA170A057740C127FAE52
- MD5 SHA1 SHA512 SSDEEP TLSH
Score7/10-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Drops startup file
-
Executes dropped EXE