General
- Target 2026-10-01_4b71166776a85456893ff43ee1a4b3b9_amadey_elex_glassworm_luca-stealer_mespinoza_njrat_remcos_smoke-loader
- Size 5.6MB
- Sample261002-smfa6swxfs
- SHA256 027f64638fef5f2c4421838b83fb8fdcae730cb210b463e6ec11114779da51e5
- MD5 4b71166776a85456893ff43ee1a4b3b9
- SHA1 db97cf3278f743e36f3911072e8588161dc174c1
- SHA512 86f8a39e158627113fdac3e1f87d0c520a13bb7c8ac5ff66488aaf5573bd4e6e8575dc0904b3c4ea8c25e3555c0ed4134a8cd284f6189f97f10619e3938f5d95
- SSDEEP 98304:WPJjzrZtnNrk1x+yhlqdjlBH7GWQOuwu2J2m7VHBU09cv8JVNFmQNvN:EV3WnqxHweHAv8J9v5N
- TLSH T1C256027726514121D0E28C36863BBEB5B1F812366B01B8FFB7D8D9C516310E1BAB26D7
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
7/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-10-01_4b71166776a85456893ff43ee1a4b3b9_amadey_elex_glassworm_luca-stealer_mespinoza_njrat_remcos_smoke-loader.exe
Resource
win10v2004-20260911-en
5 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-10-01_4b71166776a85456893ff43ee1a4b3b9_amadey_elex_glassworm_luca-stealer_mespinoza_njrat_remcos_smoke-loader.exe
Resource
win11ltsc2024-20260911-en
4 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-10-01_4b71166776a85456893ff43ee1a4b3b9_amadey_elex_glassworm_luca-stealer_mespinoza_njrat_remcos_smoke-loader
- Size 5.6MB
- SHA256 027f64638fef5f2c4421838b83fb8fdcae730cb210b463e6ec11114779da51e5
- MD5 4b71166776a85456893ff43ee1a4b3b9
- SHA1 db97cf3278f743e36f3911072e8588161dc174c1
- SHA512 86f8a39e158627113fdac3e1f87d0c520a13bb7c8ac5ff66488aaf5573bd4e6e8575dc0904b3c4ea8c25e3555c0ed4134a8cd284f6189f97f10619e3938f5d95
- SSDEEP 98304:WPJjzrZtnNrk1x+yhlqdjlBH7GWQOuwu2J2m7VHBU09cv8JVNFmQNvN:EV3WnqxHweHAv8J9v5N
- TLSH T1C256027726514121D0E28C36863BBEB5B1F812366B01B8FFB7D8D9C516310E1BAB26D7
- MD5 SHA1 SHA512 SSDEEP TLSH
Score7/10-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.