General
- Target 2026-09-30_bf5d6c836a979d16a89bd00ce1c45d4e_amadey_elex_glassworm_njrat_smoke-loader_stealc_stop_tofsee
- Size 1.5MB
- Sample261001-hn9lassdrd
- SHA256 c96b62a961fb828a15ea5b001e69d8c4fd166e70ff99344dd40a1012622cf47e
- MD5 bf5d6c836a979d16a89bd00ce1c45d4e
- SHA1 b9de27f73358eda7f7a8d8bde2a44bbf45b295bc
- SHA512 33f9164b8029d0a519268f0b3aa82727f32608394f16d712c6e3f8d38b1297111fc226531eeda3300bdf1a5eedfccf896ae9bd5340309a0d66bd6b6200335858
- SSDEEP 24576:b5ldIy2YEGwTwFFA20gPgFKhbBfLUJf1V7YymHdyVJE6CVkCqzEBkFF0128f:bp2YqGXKLudoE6COCHBQW1
- TLSH T1D475E0223D92D921D1692BF0E4E916F31F79FC24D360EE8B29947C997AF2391C10537A
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
7/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-09-30_bf5d6c836a979d16a89bd00ce1c45d4e_amadey_elex_glassworm_njrat_smoke-loader_stealc_stop_tofsee.exe
Resource
win10v2004-20260911-en
6 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-09-30_bf5d6c836a979d16a89bd00ce1c45d4e_amadey_elex_glassworm_njrat_smoke-loader_stealc_stop_tofsee.exe
Resource
win11ltsc2024-20260911-en
5 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-09-30_bf5d6c836a979d16a89bd00ce1c45d4e_amadey_elex_glassworm_njrat_smoke-loader_stealc_stop_tofsee
- Size 1.5MB
- SHA256 c96b62a961fb828a15ea5b001e69d8c4fd166e70ff99344dd40a1012622cf47e
- MD5 bf5d6c836a979d16a89bd00ce1c45d4e
- SHA1 b9de27f73358eda7f7a8d8bde2a44bbf45b295bc
- SHA512 33f9164b8029d0a519268f0b3aa82727f32608394f16d712c6e3f8d38b1297111fc226531eeda3300bdf1a5eedfccf896ae9bd5340309a0d66bd6b6200335858
- SSDEEP 24576:b5ldIy2YEGwTwFFA20gPgFKhbBfLUJf1V7YymHdyVJE6CVkCqzEBkFF0128f:bp2YqGXKLudoE6COCHBQW1
- TLSH T1D475E0223D92D921D1692BF0E4E916F31F79FC24D360EE8B29947C997AF2391C10537A
- MD5 SHA1 SHA512 SSDEEP TLSH
Score7/10-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Executes dropped EXE