General
- Target 2026-07-20_2dd05c87fe825003b8834e9fe69acb20_amadey_elex_glassworm_luca-stealer_njrat_smoke-loader
- Size 4.0MB
- Sample260720-l85pmaet6p
- SHA256 ec3fabcea53de2315d5f8eb550d141bfa31c5d6d6b95117a76f815284218f717
- MD5 2dd05c87fe825003b8834e9fe69acb20
- SHA1 8e285065822ffd899b517793175612148aa6eb0a
- SHA512 b10be7d1fc7cecdf88f7b56b6156949391ffdda06fc17f29a86e48f544ae5e5fc677e27967a67a2d6fe7953701db49263634a38d1699f172deb3284e8bc42a7d
- SSDEEP 49152:d0OXFz9wvJpGVbumh1+//oksCVfTsm7Z/ePGsBhp4s:dVrwvJpGw/7DZe9Bz4
- TLSH T15416BE7E6542E331E59EE074A3A9BEF67B381711DBEC8ACBCAC004A4D5233D1D227516
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
7/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-07-20_2dd05c87fe825003b8834e9fe69acb20_amadey_elex_glassworm_luca-stealer_njrat_smoke-loader.exe
Resource
win10v2004-20260513-en
8 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-07-20_2dd05c87fe825003b8834e9fe69acb20_amadey_elex_glassworm_luca-stealer_njrat_smoke-loader.exe
Resource
win11ltsc2024-20260710-en
7 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-07-20_2dd05c87fe825003b8834e9fe69acb20_amadey_elex_glassworm_luca-stealer_njrat_smoke-loader
- Size 4.0MB
- SHA256 ec3fabcea53de2315d5f8eb550d141bfa31c5d6d6b95117a76f815284218f717
- MD5 2dd05c87fe825003b8834e9fe69acb20
- SHA1 8e285065822ffd899b517793175612148aa6eb0a
- SHA512 b10be7d1fc7cecdf88f7b56b6156949391ffdda06fc17f29a86e48f544ae5e5fc677e27967a67a2d6fe7953701db49263634a38d1699f172deb3284e8bc42a7d
- SSDEEP 49152:d0OXFz9wvJpGVbumh1+//oksCVfTsm7Z/ePGsBhp4s:dVrwvJpGw/7DZe9Bz4
- TLSH T15416BE7E6542E331E59EE074A3A9BEF67B381711DBEC8ACBCAC004A4D5233D1D227516
- MD5 SHA1 SHA512 SSDEEP TLSH
Score7/10-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Drops startup file
-
Executes dropped EXE