General
- Target 2026-08-15_286bc25847b94f1170a9b2b34c0a354a_amadey_cloudeye_elex_glassworm_hijackloader_luca-stealer_njrat_remcos_smoke-loader_wannacry
- Size 8.9MB
- Sample260815-w3fteshc36
- SHA256 aa1f5cb03c510a6ed64a7e81b39786ff216ad0b36a1e17c3c6a4c2a0ecdcd393
- MD5 286bc25847b94f1170a9b2b34c0a354a
- SHA1 0ead7e5560905d2ee6f7e4654ad1aaac22aae224
- SHA512 f33a824cabf331c239da186559ee688be04dc72c9ac9ebe2397ca7b1fa8cfab42e927ec579618a79636b6873da4a5a015d8f850890cc52dcab97f7a9d726b7c7
- SSDEEP 196608:njBxcO4VjMUjezh5AeGZF6bUpMBF1p/kjRm4OWi2bJ4i5:Xn59iIbUwF1VERmj2bJD
- TLSH T17B96F101B7D08472D8B7453168BAE7366B35BDA01F20C6EB6344FA9D5E327D1993832B
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
8/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-08-15_286bc25847b94f1170a9b2b34c0a354a_amadey_cloudeye_elex_glassworm_hijackloader_luca-stealer.exe
Resource
win10v2004-20260513-en
7 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-08-15_286bc25847b94f1170a9b2b34c0a354a_amadey_cloudeye_elex_glassworm_hijackloader_luca-stealer.exe
Resource
win11ltsc2024-20260709-en
9 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-08-15_286bc25847b94f1170a9b2b34c0a354a_amadey_cloudeye_elex_glassworm_hijackloader_luca-stealer_njrat_remcos_smoke-loader_wannacry
- Size 8.9MB
- SHA256 aa1f5cb03c510a6ed64a7e81b39786ff216ad0b36a1e17c3c6a4c2a0ecdcd393
- MD5 286bc25847b94f1170a9b2b34c0a354a
- SHA1 0ead7e5560905d2ee6f7e4654ad1aaac22aae224
- SHA512 f33a824cabf331c239da186559ee688be04dc72c9ac9ebe2397ca7b1fa8cfab42e927ec579618a79636b6873da4a5a015d8f850890cc52dcab97f7a9d726b7c7
- SSDEEP 196608:njBxcO4VjMUjezh5AeGZF6bUpMBF1p/kjRm4OWi2bJ4i5:Xn59iIbUwF1VERmj2bJD
- TLSH T17B96F101B7D08472D8B7453168BAE7366B35BDA01F20C6EB6344FA9D5E327D1993832B
- MD5 SHA1 SHA512 SSDEEP TLSH
Score8/10-
Drops file in Drivers directory
-
Adds Run key to start application
-
Drops file in System32 directory