General
- Target 2026-07-21_21efc287fa0facd59597b5c1335037fa_amadey_elex_glassworm_luca-stealer_njrat_smoke-loader
- Size 4.0MB
- Sample260721-25ft4aaq5s
- SHA256 4af6bf5df818fcffcdcee2b95cb3cb16f0dbe57dcdaa441d2137bddec9d7e03e
- MD5 21efc287fa0facd59597b5c1335037fa
- SHA1 ae88e81cb20cc7ffe36182a90694866f740510fa
- SHA512 299c6cd918aea81edc1ac355e501484b9ca36353e41cec539d5e077ad8255b8d172ac230210aa9266a9c5b1b0a4ab72b863c4729c805054313d1a61f4ed93a2c
- SSDEEP 24576:gHi72IXvlXhoiXEr9eYN5gQsSyAGBkND7g/d02OxRA0tUXF2K2iMMfwoiJpGVFp:PFXSeKgQsSy/O+0Q0OXFz9wvJpGVb
- TLSH T19816BE33A48081F1E19214F7ECF6DBBECD28AF30D32195D7D6A0BFD996640E16235662
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
7/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-07-21_21efc287fa0facd59597b5c1335037fa_amadey_elex_glassworm_luca-stealer_njrat_smoke-loader.exe
Resource
win10v2004-20260513-en
8 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-07-21_21efc287fa0facd59597b5c1335037fa_amadey_elex_glassworm_luca-stealer_njrat_smoke-loader.exe
Resource
win11ltsc2024-20260710-en
7 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-07-21_21efc287fa0facd59597b5c1335037fa_amadey_elex_glassworm_luca-stealer_njrat_smoke-loader
- Size 4.0MB
- SHA256 4af6bf5df818fcffcdcee2b95cb3cb16f0dbe57dcdaa441d2137bddec9d7e03e
- MD5 21efc287fa0facd59597b5c1335037fa
- SHA1 ae88e81cb20cc7ffe36182a90694866f740510fa
- SHA512 299c6cd918aea81edc1ac355e501484b9ca36353e41cec539d5e077ad8255b8d172ac230210aa9266a9c5b1b0a4ab72b863c4729c805054313d1a61f4ed93a2c
- SSDEEP 24576:gHi72IXvlXhoiXEr9eYN5gQsSyAGBkND7g/d02OxRA0tUXF2K2iMMfwoiJpGVFp:PFXSeKgQsSy/O+0Q0OXFz9wvJpGVb
- TLSH T19816BE33A48081F1E19214F7ECF6DBBECD28AF30D32195D7D6A0BFD996640E16235662
- MD5 SHA1 SHA512 SSDEEP TLSH
Score7/10-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Drops startup file
-
Executes dropped EXE