Analysis
- max time kernel
149s - max time network
142s - platform
windows11-ltsc_2024_x64 - resource
win11ltsc2024-20260709-en - resource tags
arch:x64arch:x86image:win11ltsc2024-20260709-enlocale:en-usos:windows11-ltsc_2024-x64systemwindows - submitted
10/07/2026, 19:13
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-07-10_e5d7e00ac1974e058c7ab6ccfedf3e29_amadey_elex_glassworm_luca-stealer_mespinoza_njrat.exe
Resource
win10v2004-20260513-en
2 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-07-10_e5d7e00ac1974e058c7ab6ccfedf3e29_amadey_elex_glassworm_luca-stealer_mespinoza_njrat.exe
Resource
win11ltsc2024-20260709-en
1 signatures
150 seconds
General
- Target 2026-07-10_e5d7e00ac1974e058c7ab6ccfedf3e29_amadey_elex_glassworm_luca-stealer_mespinoza_njrat.exe
- Size 2.4MB
- Sample260710-xxevlsfv2k
- SHA256 88d9cfdb7bbe4c6612b3ede12941cbe022e5400028ff794ab43fa15eca9e9b10
- MD5 e5d7e00ac1974e058c7ab6ccfedf3e29
- SHA1 0ca35caae7f7432dc7219d26c6a4bf4b4c25247d
- SHA512 98e278c70d61d18dbdc3ec33d782a73504e3e1d3161d13aed1a591fa3a6d86269aa1fcb10558fc6e7cb66da35fd66bff127f63ff53d51502b81052e57fd6c61a
- SSDEEP 49152:iGm3Lrds+GeDgH5gPTrJ768zLdW8PbSbqqzAH+ACQS:wW+GeUH/0L0UbSbqn+ACQ
- TLSH T157C5E001F99190B1E8663271743CA7795E39BE018F3089CBDB94BD985FB01D1D63A3AB
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
3/10
Malware Config
Signatures
- System Location Discovery: System Language Discovery 1 TTPs 1 IoCs
Attempt gather information about the system language of a victim in order to infer the geographical location of that host.
description ioc Process Key opened \REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language 2026-07-10_e5d7e00ac1974e058c7ab6ccfedf3e29_amadey_elex_glassworm_luca-stealer_mespinoza_njrat.exe
Processes
-
C:\Users\Admin\AppData\Local\Temp\2026-07-10_e5d7e00ac1974e058c7ab6ccfedf3e29_amadey_elex_glassworm_luca-stealer_mespinoza_njrat.exe"C:\Users\Admin\AppData\Local\Temp\2026-07-10_e5d7e00ac1974e058c7ab6ccfedf3e29_amadey_elex_glassworm_luca-stealer_mespinoza_njrat.exe"1⤵
- System Location Discovery: System Language Discovery
PID:5044
Network
MITRE ATT&CK Enterprise v16
Replay Monitor
Loading Replay Monitor...
Downloads
- Path C:\Users\Admin\AppData\Local\Temp\lite_installer.log
- Size 1KB
- SHA256 34081787e7a6473d6132081bec1b98bef42409cb3695917a14fdfdc60b201973
- MD5 eda870e062f9582bca109a72b62eef0f
- SHA1 b1d48c43ebde74348cea350162e2de4c3fce7605
- SHA512 2fbe1e0157bba4029478043af300f32a85c3c12d2a3a1075e0bb7f89700e8ab4786026b0ac0a936681a6ac2cec0c88e81a843d713123deb26af7535f13dbcb62
- TLSH T16331E2001E755DE913DCC10A67B4AD86DD90F2E3A688A2F27B9A8C9887C11917FFD194
- MD5 SHA1 SHA512 TLSH
- Path C:\Users\Admin\AppData\Local\Temp\lite_installer.log
- Size 7KB
- SHA256 487c845c2c3d25fbef5da469e22e34bc309a88146ff51ea185c987515efcf554
- MD5 b9bd2c8dfa806a828235b95d8cf493b9
- SHA1 0d5182400955c4737179a70efd0bf91fe4629479
- SHA512 728905c5cd67850ce62b992620baba2f8f752dcdc171915608d16bb0552ec4e50fbb6f393f1e2613faa281e96c896ee7bf3266d3cd14508df58db0589be3bb98
- SSDEEP 96:KToG+rXm1mCTHSHsM35HYQ07iX1wZsYAc8J1YLsaIaDaMXIB32O:AJGiFTexHwl49F
- TLSH T1C9E17C001E3569A47B982057C9E46E83FDC4F2EB52C4E4F2F68B4DD89786241BFBD1A4
- MD5 SHA1 SHA512 SSDEEP TLSH