General
- Target 2026-10-22_82c8f2d4d72238d552963e3fd5c1cdb9_amadey_elex_glassworm_hijackloader_luca-stealer_njrat_remcos_smoke-loader
- Size 1.2MB
- Sample261024-hdlfqaed78
- SHA256 61bd59ba5d68b4c15eeb85999e8ba5efc066b18305c1645d5357eb9560c004d8
- MD5 82c8f2d4d72238d552963e3fd5c1cdb9
- SHA1 eb463c5fd6dde117ff82a87cd690b1e40c713b7d
- SHA512 3fa5fc38123a2106899b20fde8b7b2ae8793ab2b715085f2dd1a963aaf7ff3d03ffffc7676ab411bdacf5be50d3ef027d70f4bca68007eeac5abc3afc97c0104
- SSDEEP 24576:doMOW0n7Ubxk/uRtqLGJLQ4a56duA/85RkV4l7/ZDB:E4iEwGJra0uAUfkVy7/ZDB
- TLSH T1E2458C2176D98036F2B32731687C92545A3AFCB2993A854F73CC666D1F30A818E35B77
- MD5 SHA1 SHA512 SSDEEP TLSH
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-10-22_82c8f2d4d72238d552963e3fd5c1cdb9_amadey_elex_glassworm_hijackloader_luca-stealer_njrat_remcos_smoke-loader.exe
Resource
win10v2004-20260911-en
12 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-10-22_82c8f2d4d72238d552963e3fd5c1cdb9_amadey_elex_glassworm_hijackloader_luca-stealer_njrat_remcos_smoke-loader
- Size 1.2MB
- SHA256 61bd59ba5d68b4c15eeb85999e8ba5efc066b18305c1645d5357eb9560c004d8
- MD5 82c8f2d4d72238d552963e3fd5c1cdb9
- SHA1 eb463c5fd6dde117ff82a87cd690b1e40c713b7d
- SHA512 3fa5fc38123a2106899b20fde8b7b2ae8793ab2b715085f2dd1a963aaf7ff3d03ffffc7676ab411bdacf5be50d3ef027d70f4bca68007eeac5abc3afc97c0104
- SSDEEP 24576:doMOW0n7Ubxk/uRtqLGJLQ4a56duA/85RkV4l7/ZDB:E4iEwGJra0uAUfkVy7/ZDB
- TLSH T1E2458C2176D98036F2B32731687C92545A3AFCB2993A854F73CC666D1F30A818E35B77
- MD5 SHA1 SHA512 SSDEEP TLSH
-
UPX dump on OEP (original entry point)
-
Drops autorun.inf file
Malware can abuse Windows Autorun to spread further via attached volumes.