General
- Target 2026-08-15_1c3ee8da392c68a2bd9e08cf8bf60676_amadey_elex_glassworm_luca-stealer_njrat_smoke-loader_swisyn
- Size 1.5MB
- Sample260815-td8rssdp9y
- SHA256 6f5c511e84d3faa83d6012c5e0900bbb83f91f417677b61c3537ced3ca427ed7
- MD5 1c3ee8da392c68a2bd9e08cf8bf60676
- SHA1 bedb674ce37598f883c3e367d815117203d9c8c3
- SHA512 7accbedc6ad940bb3277d3fe2066fe6dbc1fb67b3d7c1b58849315ec321fcf43ac6fd68ec6b9abe11602b77c0032db6146a18ef7212cbea8f47b114bc0930ad4
- SSDEEP 24576:zFOaJVp/8Rlf53QPA0a8xWwtsCvaM9L6g8b2vdIews9jbegBbtftT4g2ICz:5p8Rm28xdSuL9RiewAbeM0g2I2
- TLSH T13875BF02F444E022D8D98C307ABBCA7E29297D3007215BEF5B9079675FB07DA7539E1A
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
10/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-08-15_1c3ee8da392c68a2bd9e08cf8bf60676_amadey_elex_glassworm_luca-stealer_njrat_smoke-loader_swisyn.exe
Resource
win10v2004-20260513-en
10 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-08-15_1c3ee8da392c68a2bd9e08cf8bf60676_amadey_elex_glassworm_luca-stealer_njrat_smoke-loader_swisyn.exe
Resource
win11ltsc2024-20260709-en
10 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-08-15_1c3ee8da392c68a2bd9e08cf8bf60676_amadey_elex_glassworm_luca-stealer_njrat_smoke-loader_swisyn
- Size 1.5MB
- SHA256 6f5c511e84d3faa83d6012c5e0900bbb83f91f417677b61c3537ced3ca427ed7
- MD5 1c3ee8da392c68a2bd9e08cf8bf60676
- SHA1 bedb674ce37598f883c3e367d815117203d9c8c3
- SHA512 7accbedc6ad940bb3277d3fe2066fe6dbc1fb67b3d7c1b58849315ec321fcf43ac6fd68ec6b9abe11602b77c0032db6146a18ef7212cbea8f47b114bc0930ad4
- SSDEEP 24576:zFOaJVp/8Rlf53QPA0a8xWwtsCvaM9L6g8b2vdIews9jbegBbtftT4g2ICz:5p8Rm28xdSuL9RiewAbeM0g2I2
- TLSH T13875BF02F444E022D8D98C307ABBCA7E29297D3007215BEF5B9079675FB07DA7539E1A
- MD5 SHA1 SHA512 SSDEEP TLSH
Score10/10-
Modifies visibility of hidden/system files in Explorer
-
Executes dropped EXE
-
Adds Run key to start application
-
Drops file in System32 directory