General
- Target 2026-07-31_c87c04e73073ebb00ef8e47a40473ce6_amadey_elex_glassworm_luca-stealer_manuscrypt_njrat_remcos_rhadamanthys_smoke-loader_stop
- Size 7.9MB
- Sample260731-t9pc2awfle
- SHA256 1ceae299e17d018ca28d70a6227a3c87cbb378fdeecc8a755716589e4f53c205
- MD5 c87c04e73073ebb00ef8e47a40473ce6
- SHA1 f18fe34173ea9bf47fad3ca12e0b7662b098c638
- SHA512 22e7eb86d777d519948d0be8681932ba895eb7aaf9168a3000ccc6cd2dc775776de9f84dbb1c9feca101b8ea1e94d11479f681e688ba5978b0ac5448ec73ac0b
- SSDEEP 98304:H9YSk1xQeMjLsAAa/7JNzJwjI5klUi6xQeMjLsAAa/7JNzJwjI5klUigKYkBEvH4:6xweGZF6bUseGZF6bUpMBF1p/kjRg
- TLSH T102862310B7E88136F0B70A354CB5C2315A7ABD622F25C68F57C51B6E0E326D0AA36777
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
10/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-07-31_c87c04e73073ebb00ef8e47a40473ce6_amadey_elex_glassworm_luca-stealer_manuscrypt_njrat_remc.exe
Resource
win10v2004-20260513-en
8 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-07-31_c87c04e73073ebb00ef8e47a40473ce6_amadey_elex_glassworm_luca-stealer_manuscrypt_njrat_remc.exe
Resource
win11ltsc2024-20260709-en
8 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-07-31_c87c04e73073ebb00ef8e47a40473ce6_amadey_elex_glassworm_luca-stealer_manuscrypt_njrat_remcos_rhadamanthys_smoke-loader_stop
- Size 7.9MB
- SHA256 1ceae299e17d018ca28d70a6227a3c87cbb378fdeecc8a755716589e4f53c205
- MD5 c87c04e73073ebb00ef8e47a40473ce6
- SHA1 f18fe34173ea9bf47fad3ca12e0b7662b098c638
- SHA512 22e7eb86d777d519948d0be8681932ba895eb7aaf9168a3000ccc6cd2dc775776de9f84dbb1c9feca101b8ea1e94d11479f681e688ba5978b0ac5448ec73ac0b
- SSDEEP 98304:H9YSk1xQeMjLsAAa/7JNzJwjI5klUi6xQeMjLsAAa/7JNzJwjI5klUigKYkBEvH4:6xweGZF6bUseGZF6bUpMBF1p/kjRg
- TLSH T102862310B7E88136F0B70A354CB5C2315A7ABD622F25C68F57C51B6E0E326D0AA36777
- MD5 SHA1 SHA512 SSDEEP TLSH
Score10/10-
Modifies WinLogon for persistence
-
Adds Run key to start application
-
Drops file in System32 directory