General
- Target 2026-08-14_cf03d0be400f4edb9edd3e0128d00d48_amadey_elex_glassworm_hijackloader_luca-stealer_njrat_remcos_smoke-loader_vidar
- Size 13.0MB
- Sample260814-dpvfjsttew
- SHA256 afbc67359fcd7fd5013343f79fb3d22acd465b5b1c7eda14429d24f28d1147a0
- MD5 cf03d0be400f4edb9edd3e0128d00d48
- SHA1 a947f388ba73c70ea14b2065ab7532fd7d358318
- SHA512 3f77986dfe1e47b22a971c3796c6e812aa2a4d494522668689b3f9d0d1dd5b6094ace966c194ffd9c0d62af10c2dd754af5cbfe86b066f6c500c3d56ea079b00
- SSDEEP 98304:o0W1PszC0W1PszC0W1PszC0W1PszC0W1PszC0W1PszC0W1PszC0W1PszXOU/jIEe:YxsixsixsixsixsixsixsixszFIF0wuO
- TLSH T110D68D02FBC64071E577213148BB92BA4A76BA114A31C99FB38C562F5F33BC09A3575B
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
7/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-08-14_cf03d0be400f4edb9edd3e0128d00d48_amadey_elex_glassworm_hijackloader_luca-stealer_njrat_remcos_smoke-loader_vidar.exe
Resource
win10v2004-20260513-en
12 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-08-14_cf03d0be400f4edb9edd3e0128d00d48_amadey_elex_glassworm_hijackloader_luca-stealer_njrat_remcos_smoke-loader_vidar.exe
Resource
win11ltsc2024-20260709-en
10 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-08-14_cf03d0be400f4edb9edd3e0128d00d48_amadey_elex_glassworm_hijackloader_luca-stealer_njrat_remcos_smoke-loader_vidar
- Size 13.0MB
- SHA256 afbc67359fcd7fd5013343f79fb3d22acd465b5b1c7eda14429d24f28d1147a0
- MD5 cf03d0be400f4edb9edd3e0128d00d48
- SHA1 a947f388ba73c70ea14b2065ab7532fd7d358318
- SHA512 3f77986dfe1e47b22a971c3796c6e812aa2a4d494522668689b3f9d0d1dd5b6094ace966c194ffd9c0d62af10c2dd754af5cbfe86b066f6c500c3d56ea079b00
- SSDEEP 98304:o0W1PszC0W1PszC0W1PszC0W1PszC0W1PszC0W1PszC0W1PszC0W1PszXOU/jIEe:YxsixsixsixsixsixsixsixszFIF0wuO
- TLSH T110D68D02FBC64071E577213148BB92BA4A76BA114A31C99FB38C562F5F33BC09A3575B
- MD5 SHA1 SHA512 SSDEEP TLSH
Score7/10-
Creates new service(s)
-
Executes dropped EXE
-
Adds Run key to start application
MITRE ATT&CK Enterprise v16
Execution
Command and Scripting Interpreter
1Windows Command Shell
1Scheduled Task/Job
1Scheduled Task
1System Services
1Service Execution
1Persistence
Boot or Logon Autostart Execution
1Registry Run Keys / Startup Folder
1Create or Modify System Process
1Windows Service
1Scheduled Task/Job
1Scheduled Task
1