General
- Target 2026-09-29_a9da1471b256d40f0ffea704e85d8c24_amadey_elex_glassworm_luca-stealer_mespinoza_njrat_remcos_smoke-loader
- Size 5.6MB
- Sample260930-v8c42sec26
- SHA256 8e5d8f4351b78a1b05383c6c53ed6e393c72783e830e745ed89bd5db7951b0e3
- MD5 a9da1471b256d40f0ffea704e85d8c24
- SHA1 d911ecf15f106c390f7306bd0f8ce3b7c1c54a13
- SHA512 11ac335d02cea314e666bf7a6000eef1b7c9c7b81141b9655172b5c8bcadf198658038de695afaf46785ce36b8e929cc0b20e8406a89870de323b2d062802723
- SSDEEP 98304:JPJjzrZtnNrk1x+yhlqdjlBH7GWQOuwu2J2m7VHBU09cv8JVNFmQNvN:lV3WnqxHweHAv8J9v5N
- TLSH T18E56027726514121D0E28C36863BBEB5B1F812366B01B8FFB7D8D9C516310E1BAB26D7
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
7/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-09-29_a9da1471b256d40f0ffea704e85d8c24_amadey_elex_glassworm_luca-stealer_mespinoza_njrat_remcos_smoke-loader.exe
Resource
win10v2004-20260911-en
5 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-09-29_a9da1471b256d40f0ffea704e85d8c24_amadey_elex_glassworm_luca-stealer_mespinoza_njrat_remcos_smoke-loader.exe
Resource
win11ltsc2024-20260911-en
4 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-09-29_a9da1471b256d40f0ffea704e85d8c24_amadey_elex_glassworm_luca-stealer_mespinoza_njrat_remcos_smoke-loader
- Size 5.6MB
- SHA256 8e5d8f4351b78a1b05383c6c53ed6e393c72783e830e745ed89bd5db7951b0e3
- MD5 a9da1471b256d40f0ffea704e85d8c24
- SHA1 d911ecf15f106c390f7306bd0f8ce3b7c1c54a13
- SHA512 11ac335d02cea314e666bf7a6000eef1b7c9c7b81141b9655172b5c8bcadf198658038de695afaf46785ce36b8e929cc0b20e8406a89870de323b2d062802723
- SSDEEP 98304:JPJjzrZtnNrk1x+yhlqdjlBH7GWQOuwu2J2m7VHBU09cv8JVNFmQNvN:lV3WnqxHweHAv8J9v5N
- TLSH T18E56027726514121D0E28C36863BBEB5B1F812366B01B8FFB7D8D9C516310E1BAB26D7
- MD5 SHA1 SHA512 SSDEEP TLSH
Score7/10-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.