General
- Target 2026-07-15_36f2777ded0c0e4240c3ea733a2a502b_amadey_elex_glassworm_luca-stealer_njrat_smoke-loader
- Size 2.3MB
- Sample260715-pf13hsb17m
- SHA256 2eb05b88c36f883dc077e643f9d67a7378f7908eda5e727bfdf963073d65d317
- MD5 36f2777ded0c0e4240c3ea733a2a502b
- SHA1 50140c6bb7eaa47e221685728d5d338d0674236a
- SHA512 047bb802af4dd56bc0225c00dfac8072e23e7fe4d06498d74f74b3a5e6a2487693bdc5c91294cb5a7c446ab93aa10b9d1eaf9738585e237f649e875cab942258
- SSDEEP 49152:QBJlf7+DgjqHXR10b2YdNdg52CixlYPbTOucb4DjEZ1a4:QAgjqHXwb22Ndg52CijL4
- TLSH T185B5AE12B685BCF3E4B20275277B47FB863DD9200368C5DBA3D01A295D282D3763A7E5
- MD5 SHA1 SHA512 SSDEEP TLSH
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-07-15_36f2777ded0c0e4240c3ea733a2a502b_amadey_elex_glassworm_luca-stealer_njrat_smoke-loader.exe
Resource
win10v2004-20260513-en
10 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-07-15_36f2777ded0c0e4240c3ea733a2a502b_amadey_elex_glassworm_luca-stealer_njrat_smoke-loader
- Size 2.3MB
- SHA256 2eb05b88c36f883dc077e643f9d67a7378f7908eda5e727bfdf963073d65d317
- MD5 36f2777ded0c0e4240c3ea733a2a502b
- SHA1 50140c6bb7eaa47e221685728d5d338d0674236a
- SHA512 047bb802af4dd56bc0225c00dfac8072e23e7fe4d06498d74f74b3a5e6a2487693bdc5c91294cb5a7c446ab93aa10b9d1eaf9738585e237f649e875cab942258
- SSDEEP 49152:QBJlf7+DgjqHXR10b2YdNdg52CixlYPbTOucb4DjEZ1a4:QAgjqHXwb22Ndg52CijL4
- TLSH T185B5AE12B685BCF3E4B20275277B47FB863DD9200368C5DBA3D01A295D282D3763A7E5
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
MITRE ATT&CK Enterprise v16
Credential Access
Credentials from Password Stores
1Credentials from Web Browsers
1Unsecured Credentials
1Credentials In Files
1