General
- Target 2026-07-17_ad7b18308c760df2052cc5a1258f4735_amadey_elex_glassworm_njrat_smoke-loader
- Size 4.1MB
- Sample260717-1ed25set8k
- SHA256 9b73e3635d5b32ea56817e320e933af59d76dfff952dafeced3a7c7ddfca6b73
- MD5 ad7b18308c760df2052cc5a1258f4735
- SHA1 eeb5d44dbeea85850eab434dd7fdf6c717000b68
- SHA512 2406cbdf22d68ede1d6d7173f32012250bde64eab9ab8751b89b3a16b3a431c91567ead765c1e805576830c0b3bb76256d5d37c82cab6dfb2cf0cd6648dd4108
- SSDEEP 49152:Zvm22KmZWXqrJry+JVWpK5X8o+iEUIpk/d5suwLVT5kUvgJSgHT6ojkxFbxLWC3Y:VmJZWgry+iCX8bjp6uVLUjH5oxFbx
- TLSH T10516DF53EB818AE8E28D08776F594250D62EF6219A4F6351396C130DDF8738B8F61E3D
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
9/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-07-17_ad7b18308c760df2052cc5a1258f4735_amadey_elex_glassworm_njrat_smoke-loader.exe
Resource
win10v2004-20260513-en
8 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-07-17_ad7b18308c760df2052cc5a1258f4735_amadey_elex_glassworm_njrat_smoke-loader.exe
Resource
win11ltsc2024-20260710-en
7 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-07-17_ad7b18308c760df2052cc5a1258f4735_amadey_elex_glassworm_njrat_smoke-loader
- Size 4.1MB
- SHA256 9b73e3635d5b32ea56817e320e933af59d76dfff952dafeced3a7c7ddfca6b73
- MD5 ad7b18308c760df2052cc5a1258f4735
- SHA1 eeb5d44dbeea85850eab434dd7fdf6c717000b68
- SHA512 2406cbdf22d68ede1d6d7173f32012250bde64eab9ab8751b89b3a16b3a431c91567ead765c1e805576830c0b3bb76256d5d37c82cab6dfb2cf0cd6648dd4108
- SSDEEP 49152:Zvm22KmZWXqrJry+JVWpK5X8o+iEUIpk/d5suwLVT5kUvgJSgHT6ojkxFbxLWC3Y:VmJZWgry+iCX8bjp6uVLUjH5oxFbx
- TLSH T10516DF53EB818AE8E28D08776F594250D62EF6219A4F6351396C130DDF8738B8F61E3D
- MD5 SHA1 SHA512 SSDEEP TLSH
Score9/10-
UPX dump on OEP (original entry point)
-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Executes dropped EXE