General
- Target 2026-07-15_27fb1114fae291db33d21330091ad74f_amadey_elex_glassworm_luca-stealer_njrat_smoke-loader
- Size 4.0MB
- Sample260715-mf5pladt41
- SHA256 7c6e9ad5fdae028b38066321eb55f7ee2fd017a0778bdff7f7473cf5e69d1324
- MD5 27fb1114fae291db33d21330091ad74f
- SHA1 65678995b1fa63542a1f44200c50777c8ece303e
- SHA512 b73ef596291c6bfd408ddd5b8549f33edf116d7e1e6b234b4c38a7aa3da61acdf899b144359513cee60d1be48a4380f1a6cae11e4b7c7e62d19b1bb14506ae53
- SSDEEP 49152:ZTA5/YN/7CiXsFIJ5e5vZZLN0EjM0OXFz9wvJpGVb:zpX4ik5vZZ6yMVrwvJpG
- TLSH T1EF166761ABC19D3FE69200F1AD79A7761A38213D1F24909B47EC14D4AF60ECDBEE5B01
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
7/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-07-15_27fb1114fae291db33d21330091ad74f_amadey_elex_glassworm_luca-stealer_njrat_smoke-loader.exe
Resource
win10v2004-20260513-en
8 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-07-15_27fb1114fae291db33d21330091ad74f_amadey_elex_glassworm_luca-stealer_njrat_smoke-loader.exe
Resource
win11ltsc2024-20260709-en
7 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-07-15_27fb1114fae291db33d21330091ad74f_amadey_elex_glassworm_luca-stealer_njrat_smoke-loader
- Size 4.0MB
- SHA256 7c6e9ad5fdae028b38066321eb55f7ee2fd017a0778bdff7f7473cf5e69d1324
- MD5 27fb1114fae291db33d21330091ad74f
- SHA1 65678995b1fa63542a1f44200c50777c8ece303e
- SHA512 b73ef596291c6bfd408ddd5b8549f33edf116d7e1e6b234b4c38a7aa3da61acdf899b144359513cee60d1be48a4380f1a6cae11e4b7c7e62d19b1bb14506ae53
- SSDEEP 49152:ZTA5/YN/7CiXsFIJ5e5vZZLN0EjM0OXFz9wvJpGVb:zpX4ik5vZZ6yMVrwvJpG
- TLSH T1EF166761ABC19D3FE69200F1AD79A7761A38213D1F24909B47EC14D4AF60ECDBEE5B01
- MD5 SHA1 SHA512 SSDEEP TLSH
Score7/10-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Drops startup file
-
Executes dropped EXE