General
- Target 2026-07-22_0af6cbbdb6bf2fe4554ab11a53a62315_amadey_elex_glassworm_luca-stealer_njrat_smoke-loader
- Size 1.5MB
- Sample260723-arv83sed57
- SHA256 e1af46cd2d06a0301688adca6da8b68ecaf26298f61832569eafb62c481be105
- MD5 0af6cbbdb6bf2fe4554ab11a53a62315
- SHA1 e5a3fcc8334ff72a03672850665a97d456e78717
- SHA512 60662ded6eafc5c471952130aafca32120b9557d983b9f31fdd179d3c736e03da1523583c352b9a7132ea89c3b757ed95fd9e4c0f6fee7a06fb559d5c40b69ca
- SSDEEP 24576:jtFsppYorKOyzmhoZ2p4awOPn3AY05NGlSTa+/CVYEwEm4fy+13VRhybwPEpvok/:hFspmkd3O2h15+6SE9bGxgkIFUa3TwT
- TLSH T139659D62F78280B3D5C205F0606A97BA5D247631672958E3E3C01E69A9712D3673FF2F
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
10/10
Static task
static1
3 signatures
Behavioral task
behavioral1
Sample
2026-07-22_0af6cbbdb6bf2fe4554ab11a53a62315_amadey_elex_glassworm_luca-stealer_njrat_smoke-loader.exe
Resource
win10v2004-20260513-en
5 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-07-22_0af6cbbdb6bf2fe4554ab11a53a62315_amadey_elex_glassworm_luca-stealer_njrat_smoke-loader.exe
Resource
win11ltsc2024-20260709-en
5 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-07-22_0af6cbbdb6bf2fe4554ab11a53a62315_amadey_elex_glassworm_luca-stealer_njrat_smoke-loader
- Size 1.5MB
- SHA256 e1af46cd2d06a0301688adca6da8b68ecaf26298f61832569eafb62c481be105
- MD5 0af6cbbdb6bf2fe4554ab11a53a62315
- SHA1 e5a3fcc8334ff72a03672850665a97d456e78717
- SHA512 60662ded6eafc5c471952130aafca32120b9557d983b9f31fdd179d3c736e03da1523583c352b9a7132ea89c3b757ed95fd9e4c0f6fee7a06fb559d5c40b69ca
- SSDEEP 24576:jtFsppYorKOyzmhoZ2p4awOPn3AY05NGlSTa+/CVYEwEm4fy+13VRhybwPEpvok/:hFspmkd3O2h15+6SE9bGxgkIFUa3TwT
- TLSH T139659D62F78280B3D5C205F0606A97BA5D247631672958E3E3C01E69A9712D3673FF2F
- MD5 SHA1 SHA512 SSDEEP TLSH
Score9/10-
Detects executables containing SQL queries to confidential data stores. Observed in infostealers
-
Detects executables embedding registry key / value combination indicative of disabling Windows Defen
-
Executes dropped EXE