General
- Target 2026-07-31_7abeba502e5e5957904f4b268f8535e8_amadey_elex_glassworm_hijackloader_luca-stealer_njrat_redline-stealer_remcos_rhadamanthys_smoke-loader_tofsee_vidar
- Size 60.1MB
- Sample260801-bt2djsbe69
- SHA256 5e383a2e7d142ed7c8bdf18d976545162d6f0ba6254923d5922cc1135befedb7
- MD5 7abeba502e5e5957904f4b268f8535e8
- SHA1 46515023bfa546a05662e72ae4fb96f251227806
- SHA512 c77db3a3526de4f0a4c1f6a4cbb563400b3d1d3dcc6cb6b90de21dc39903730b6cb40f028d72469e0f5665d773419e7fe4f95ba05edef1dad5ab5385b1e190f6
- SSDEEP 196608:kFlfFlfFlfFlfFlfFlfFlfFlfFlAFIF0wuZU5YFlfFlfFlfFlfFlfFlfFlfFlfFD:i33333333EW5u33333333EW51H
- TLSH T1B8D7CF06FD858070DC76123048E7E2764931BD3A812189BFFDED760AAB3B9B1543E676
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
10/10
Static task
static1
2 signatures
Behavioral task
behavioral1
Sample
2026-07-31_7abeba502e5e5957904f4b268f8535e8_amadey_elex_glassworm_hijackloader_luca-stealer_njrat_re.exe
Resource
win10v2004-20260513-en
12 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-07-31_7abeba502e5e5957904f4b268f8535e8_amadey_elex_glassworm_hijackloader_luca-stealer_njrat_re.exe
Resource
win11ltsc2024-20260709-en
10 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-07-31_7abeba502e5e5957904f4b268f8535e8_amadey_elex_glassworm_hijackloader_luca-stealer_njrat_redline-stealer_remcos_rhadamanthys_smoke-loader_tofsee_vidar
- Size 60.1MB
- SHA256 5e383a2e7d142ed7c8bdf18d976545162d6f0ba6254923d5922cc1135befedb7
- MD5 7abeba502e5e5957904f4b268f8535e8
- SHA1 46515023bfa546a05662e72ae4fb96f251227806
- SHA512 c77db3a3526de4f0a4c1f6a4cbb563400b3d1d3dcc6cb6b90de21dc39903730b6cb40f028d72469e0f5665d773419e7fe4f95ba05edef1dad5ab5385b1e190f6
- SSDEEP 196608:kFlfFlfFlfFlfFlfFlfFlfFlfFlAFIF0wuZU5YFlfFlfFlfFlfFlfFlfFlfFlfFD:i33333333EW5u33333333EW51H
- TLSH T1B8D7CF06FD858070DC76123048E7E2764931BD3A812189BFFDED760AAB3B9B1543E676
- MD5 SHA1 SHA512 SSDEEP TLSH
Score7/10-
Creates new service(s)
-
Executes dropped EXE
-
Adds Run key to start application
MITRE ATT&CK Enterprise v16
Execution
Command and Scripting Interpreter
1Windows Command Shell
1Scheduled Task/Job
1Scheduled Task
1System Services
1Service Execution
1Persistence
Boot or Logon Autostart Execution
1Registry Run Keys / Startup Folder
1Create or Modify System Process
1Windows Service
1Scheduled Task/Job
1Scheduled Task
1