General
- Target 2026-08-13_e12cef31366a4b651aa414fe77ef59ae_amadey_elex_glassworm_njrat_smoke-loader
- Size 4.1MB
- Sample260813-jt2cjsdl9z
- SHA256 ce2838621621cb7f4bf27857a13032d74f5aa6bc886c66e14c4f01f2358cd5d4
- MD5 e12cef31366a4b651aa414fe77ef59ae
- SHA1 c133828f66f975327c77a4d4f5a8d05507c8d11e
- SHA512 8ff0304d54af642498416894efc5639e1b772c14e3648b844c198bfd008dfd98527c16ad6a65229dd51f516b08ad601d0d9fd1455a03ec6444429639efa4bcf8
- SSDEEP 98304:VmJZWgry+gaHNcHkEn65UzVLUjH5oxFbx:V8oIdUzVUjZEd
- TLSH T1C916DF53EB818AE8E28D08766F544250D62EF6219B4F6351796C130DDF8738B8F61E3E
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
9/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-08-13_e12cef31366a4b651aa414fe77ef59ae_amadey_elex_glassworm_njrat_smoke-loader.exe
Resource
win10v2004-20260513-en
8 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-08-13_e12cef31366a4b651aa414fe77ef59ae_amadey_elex_glassworm_njrat_smoke-loader.exe
Resource
win11ltsc2024-20260709-en
7 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-08-13_e12cef31366a4b651aa414fe77ef59ae_amadey_elex_glassworm_njrat_smoke-loader
- Size 4.1MB
- SHA256 ce2838621621cb7f4bf27857a13032d74f5aa6bc886c66e14c4f01f2358cd5d4
- MD5 e12cef31366a4b651aa414fe77ef59ae
- SHA1 c133828f66f975327c77a4d4f5a8d05507c8d11e
- SHA512 8ff0304d54af642498416894efc5639e1b772c14e3648b844c198bfd008dfd98527c16ad6a65229dd51f516b08ad601d0d9fd1455a03ec6444429639efa4bcf8
- SSDEEP 98304:VmJZWgry+gaHNcHkEn65UzVLUjH5oxFbx:V8oIdUzVUjZEd
- TLSH T1C916DF53EB818AE8E28D08766F544250D62EF6219B4F6351796C130DDF8738B8F61E3E
- MD5 SHA1 SHA512 SSDEEP TLSH
Score9/10-
UPX dump on OEP (original entry point)
-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Executes dropped EXE