2026-06-05_a4f48b19e2c38c8775b1ad959b97c026_amadey_elex_glassworm_luca-stealer_njrat_smoke-loader

General

Target
2026-06-05_a4f48b19e2c38c8775b1ad959b97c026_amadey_elex_glassworm_luca-stealer_njrat_smoke-loader
Size 4.0MB
Sample260605-2mr5eaex4y
SHA256 b287b513f66f3b243291d8e669dc4a8dc85ffe6945dfd46435a4948b4f2626b8
MD5 a4f48b19e2c38c8775b1ad959b97c026
SHA1 aa8b2f24b28a36b9f3a6b5abb1bbc8438f4e83c8
SHA512 1db4b350cbcd2cedc5f38d89c1d9f980fb32a51d4afb6e2cc3f60488df3c9d44bd21b7e14dcaffcca438ebb39cb5f16c4b2a83025273851a96b17e02806efd8a
SSDEEP 98304:zVrwvJpGlbf3Wd/H4v3TcHiB/M0fUS1j0slaiMp6OYCYASS85vzsT:zTo/H1C3MS1j0oaiMESSvlzE
TLSH
T15C161230AD41807EE5DA047AA5E1867659FC72AC93B258CF43B434D057780E91BBBA3F
MD5 SHA1 SHA512 SSDEEP TLSH

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
2026-06-05_a4f48b19e2c38c8775b1ad959b97c026_amadey_elex_glassworm_luca-stealer_njrat_smoke-loader

File Explorer

2026-06-05_a4f48b19e2c38c8775b1ad959b97c026_amadey_elex_glassworm_luca-stealer_njrat_smoke-loader

.exe 4.0MB

2026-06-05_a4f48b19e2c38c8775b1ad959b97c026_amadey_elex_glassworm_luca-stealer_njrat_smoke-loader

IMPHASH 143fcf976c623680a82e5b17cb24fa1d
SHA256 b287b513f66f3b243291d8e669dc4a8dc85ffe6945dfd46435a4948b4f2626b8
MD5 a4f48b19e2c38c8775b1ad959b97c026
SHA1 aa8b2f24b28a36b9f3a6b5abb1bbc8438f4e83c8
SHA512 1db4b350cbcd2cedc5f38d89c1d9f980fb32a51d4afb6e2cc3f60488df3c9d44bd21b7e14dcaffcca438ebb39cb5f16c4b2a83025273851a96b17e02806efd8a
SSDEEP 98304:zVrwvJpGlbf3Wd/H4v3TcHiB/M0fUS1j0slaiMp6OYCYASS85vzsT:zTo/H1C3MS1j0oaiMESSvlzE
TLSH
T15C161230AD41807EE5DA047AA5E1867659FC72AC93B258CF43B434D057780E91BBBA3F
MD5 SHA1 SHA512 SSDEEP TLSH

windows:4 windows x86 arch:x86

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

0

Major OS version

4

Entry point

10624

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LINE_NUMS_STRIPPED IMAGE_FILE_32BIT_MACHINE

PDB paths

kernel32

GetLastError GetSystemTimeAsFileTime SetUnhandledExceptionFilter GetModuleHandleW QueryPerformanceCounter GetProcAddress CloseHandle TerminateProcess Sleep GetTickCount MultiByteToWideChar WideCharToMultiByte SetLastError HeapAlloc LocalFree DeleteCriticalSection LeaveCriticalSection WriteFile ExitProcess GetStartupInfoW GetCommandLineW FindClose RaiseException SetEvent GetFileType InitializeCriticalSection HeapReAlloc FlushFileBuffers TlsSetValue TlsAlloc CreateThread TlsFree SetFilePointer CompareStringW RtlUnwind InitializeCriticalSectionAndSpinCount GetOEMCP GetEnvironmentStringsW FreeEnvironmentStringsW IsProcessorFeaturePresent FindNextFileW IsValidCodePage FindFirstFileW VirtualAlloc GetCommandLineA SetEndOfFile CreateFileA OutputDebugStringW GetFileSize EncodePointer lstrlenW GetLocaleInfoW CreateDirectoryW GetFullPathNameW GetExitCodeProcess

user32

TranslateMessage DispatchMessageW ShowWindow ReleaseDC DefWindowProcW PostQuitMessage SetWindowLongW GetMessageW GetDlgItem GetSystemMetrics PostMessageW LoadCursorW GetParent EndDialog LoadIconW GetSysColor PeekMessageW ScreenToClient RegisterClassW EnableMenuItem SystemParametersInfoW GetKeyState CharUpperW

Sharing

General

Malware Config

Signatures

File Explorer

2026-06-05_a4f48b19e2c38c8775b1ad959b97c026_amadey_elex_glassworm_luca-stealer_njrat_smoke-loader

kernel32

user32

generic