General
- Target 2026-11-03_7d22fc046ab5ac84c9295b54630759b5_amadey_elex_glassworm_hijackloader_luca-stealer_njrat_remcos_smoke-loader
- Size 1.2MB
- Sample261104-thc6pady4m
- SHA256 448fdd5da41a1ca4e786217d909f5b5ae8c27a79811b3a38eb6b7794eae0c831
- MD5 7d22fc046ab5ac84c9295b54630759b5
- SHA1 91f8110887fcdad7ed63f813de9a69c9af80775a
- SHA512 9d55e8cb4853a44e9a590493137d30773eb2e733a59e11c7dbdb1030306e4dfd0e4addb2132ac1889f324e0c38293323b8726845824d71cbc681dded2beb92b5
- SSDEEP 24576:5oMOW0n7Ubxk/uRyqLGJLQ4a56duA/85RkV4l7/ZPW+:Q4i3wGJra0uAUfkVy7/ZPN
- TLSH T13E458C2176D98036F2B32731687C92545A3AFCB2993A854F73CC666D1F30A818E35B77
- MD5 SHA1 SHA512 SSDEEP TLSH
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-11-03_7d22fc046ab5ac84c9295b54630759b5_amadey_elex_glassworm_hijackloader_luca-stealer_njrat_remcos_smoke-loader.exe
Resource
win10v2004-20260911-en
12 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-11-03_7d22fc046ab5ac84c9295b54630759b5_amadey_elex_glassworm_hijackloader_luca-stealer_njrat_remcos_smoke-loader
- Size 1.2MB
- SHA256 448fdd5da41a1ca4e786217d909f5b5ae8c27a79811b3a38eb6b7794eae0c831
- MD5 7d22fc046ab5ac84c9295b54630759b5
- SHA1 91f8110887fcdad7ed63f813de9a69c9af80775a
- SHA512 9d55e8cb4853a44e9a590493137d30773eb2e733a59e11c7dbdb1030306e4dfd0e4addb2132ac1889f324e0c38293323b8726845824d71cbc681dded2beb92b5
- SSDEEP 24576:5oMOW0n7Ubxk/uRyqLGJLQ4a56duA/85RkV4l7/ZPW+:Q4i3wGJra0uAUfkVy7/ZPN
- TLSH T13E458C2176D98036F2B32731687C92545A3AFCB2993A854F73CC666D1F30A818E35B77
- MD5 SHA1 SHA512 SSDEEP TLSH
-
UPX dump on OEP (original entry point)
-
Drops autorun.inf file
Malware can abuse Windows Autorun to spread further via attached volumes.