General
- Target 2026-07-11_c268561d00a4d93e7d4d7c216c9a1217_amadey_elex_glassworm_luca-stealer_njrat_smoke-loader
- Size 4.0MB
- Sample260711-srns4sdw9n
- SHA256 9e4dc9bd978e58bf7a264b0609ba88e007f1d6761c1ff5b72c7638e09bbb4fcd
- MD5 c268561d00a4d93e7d4d7c216c9a1217
- SHA1 3afb863256406f9e23b0521dfdf12e40eb2b6b57
- SHA512 b5e5ac822d02e14370ce202d0cf4df9192f22f3e563f852694d5e1811442cbf5e25eef1847ff314a44475c01ef7448ae70eee7aefc2ee81c1123aefa3fc19a2e
- SSDEEP 49152:e0OXFz9wvJpGVbB9h6L6A4jmHcHljRVIWfvODb1k1+:eVrwvJpGfOr8FMHP1k
- TLSH T18B16CF90D440B023F19B2376E1AA7BBE7A6C53EE13D854C75B8170976A104D3AEF46CE
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
7/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-07-11_c268561d00a4d93e7d4d7c216c9a1217_amadey_elex_glassworm_luca-stealer_njrat_smoke-loader.exe
Resource
win10v2004-20260513-en
8 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-07-11_c268561d00a4d93e7d4d7c216c9a1217_amadey_elex_glassworm_luca-stealer_njrat_smoke-loader.exe
Resource
win11ltsc2024-20260710-en
7 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-07-11_c268561d00a4d93e7d4d7c216c9a1217_amadey_elex_glassworm_luca-stealer_njrat_smoke-loader
- Size 4.0MB
- SHA256 9e4dc9bd978e58bf7a264b0609ba88e007f1d6761c1ff5b72c7638e09bbb4fcd
- MD5 c268561d00a4d93e7d4d7c216c9a1217
- SHA1 3afb863256406f9e23b0521dfdf12e40eb2b6b57
- SHA512 b5e5ac822d02e14370ce202d0cf4df9192f22f3e563f852694d5e1811442cbf5e25eef1847ff314a44475c01ef7448ae70eee7aefc2ee81c1123aefa3fc19a2e
- SSDEEP 49152:e0OXFz9wvJpGVbB9h6L6A4jmHcHljRVIWfvODb1k1+:eVrwvJpGfOr8FMHP1k
- TLSH T18B16CF90D440B023F19B2376E1AA7BBE7A6C53EE13D854C75B8170976A104D3AEF46CE
- MD5 SHA1 SHA512 SSDEEP TLSH
Score7/10Checks computer location settings
Looks up country code configured in the registry, likely geofence.
Drops startup file
Executes dropped EXE