General
- Target 2026-07-31_f9ee931062b2411cbcfa75eb1ce54fd1_amadey_elex_glassworm_luca-stealer_njrat_redline-stealer_remcos_rhadamanthys_smoke-loader_tofsee
- Size 11.5MB
- Sample260731-hgpybaec77
- SHA256 2fd78f924ca1b6cfefbca36c8c6a1fb13e1cbd2bc3f5d836207588c45a24ba51
- MD5 f9ee931062b2411cbcfa75eb1ce54fd1
- SHA1 8eff5efdd6007ad6cdf549c728c110ebc93e166d
- SHA512 e3b970b035c80b6398b762ea7df3a79ccbb7d95c9a8dc88f59f7012a5d8af7b79f12abfe7203e6bf11febad318ea92269fd4cad05ae030620c89e767c44d3d74
- SSDEEP 196608:tt38ECuut38ECuXfoYeGZF6bUpMBF1p/kjRm4OWi2bQo/:P3vCuU3vCuQsIbUwF1VERmj2bv/
- TLSH T1B8C6E192F6A485F2D462803CC495976AEAB179610730C7C722CCCA3D5F2B6D68E3DF25
- MD5 SHA1 SHA512 SSDEEP TLSH
Behavioral task
behavioral1
Sample
2026-07-31_f9ee931062b2411cbcfa75eb1ce54fd1_amadey_elex_glassworm_luca-stealer_njrat_redline-stealer.exe
Resource
win10v2004-20260513-en
13 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-07-31_f9ee931062b2411cbcfa75eb1ce54fd1_amadey_elex_glassworm_luca-stealer_njrat_redline-stealer_remcos_rhadamanthys_smoke-loader_tofsee
- Size 11.5MB
- SHA256 2fd78f924ca1b6cfefbca36c8c6a1fb13e1cbd2bc3f5d836207588c45a24ba51
- MD5 f9ee931062b2411cbcfa75eb1ce54fd1
- SHA1 8eff5efdd6007ad6cdf549c728c110ebc93e166d
- SHA512 e3b970b035c80b6398b762ea7df3a79ccbb7d95c9a8dc88f59f7012a5d8af7b79f12abfe7203e6bf11febad318ea92269fd4cad05ae030620c89e767c44d3d74
- SSDEEP 196608:tt38ECuut38ECuXfoYeGZF6bUpMBF1p/kjRm4OWi2bQo/:P3vCuU3vCuQsIbUwF1VERmj2bv/
- TLSH T1B8C6E192F6A485F2D462803CC495976AEAB179610730C7C722CCCA3D5F2B6D68E3DF25
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Detects Futurax
-
Detects executables packed with MEW
-
Adds Run key to start application
-
Drops file in System32 directory
MITRE ATT&CK Enterprise v16
Privilege Escalation
Boot or Logon Autostart Execution
1Registry Run Keys / Startup Folder
1Credential Access
Credentials from Password Stores
1Credentials from Web Browsers
1Unsecured Credentials
1Credentials In Files
1