2026-06-30_ecc29a1c0b7a933b584b52befe3bc8bf_amadey_elex_glassworm_luca-stealer_njrat_smoke-loader

General

Target
2026-06-30_ecc29a1c0b7a933b584b52befe3bc8bf_amadey_elex_glassworm_luca-stealer_njrat_smoke-loader
Size 4.0MB
Sample260701-cnb25set61
SHA256 f549465fd03cefddfdcebeb6096561f27ac07b71043aaa262be44b6e69f69a97
MD5 ecc29a1c0b7a933b584b52befe3bc8bf
SHA1 6627f97cda26b2d9a525f12ffc709bb6424448e4
SHA512 908aa289166915c7f3b9f3b52ce00e7d11c688385561cc8a0482e5c42599b035f8b2221970fe41bb752e0abd7b212cb7954eedbfbbb0dc1a219ee046d1e70cf9
SSDEEP 98304:cVrwvJpG+U6rvxxdcWy+S2+fvkFUd98f8EcldnkVRv:cmxXy+S5fvo/8EckVRv
TLSH
T11D1612117D4280B2F2E61037B9BACB7ADE2CB6306324A0E76BD415F55A634E1FB34746
MD5 SHA1 SHA512 SSDEEP TLSH

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
2026-06-30_ecc29a1c0b7a933b584b52befe3bc8bf_amadey_elex_glassworm_luca-stealer_njrat_smoke-loader

File Explorer

2026-06-30_ecc29a1c0b7a933b584b52befe3bc8bf_amadey_elex_glassworm_luca-stealer_njrat_smoke-loader

.exe 4.0MB

2026-06-30_ecc29a1c0b7a933b584b52befe3bc8bf_amadey_elex_glassworm_luca-stealer_njrat_smoke-loader

IMPHASH c361a9ded8772a5003d5e9613bb6dbee
SHA256 f549465fd03cefddfdcebeb6096561f27ac07b71043aaa262be44b6e69f69a97
MD5 ecc29a1c0b7a933b584b52befe3bc8bf
SHA1 6627f97cda26b2d9a525f12ffc709bb6424448e4
SHA512 908aa289166915c7f3b9f3b52ce00e7d11c688385561cc8a0482e5c42599b035f8b2221970fe41bb752e0abd7b212cb7954eedbfbbb0dc1a219ee046d1e70cf9
SSDEEP 98304:cVrwvJpG+U6rvxxdcWy+S2+fvkFUd98f8EcldnkVRv:cmxXy+S5fvo/8EckVRv
TLSH
T11D1612117D4280B2F2E61037B9BACB7ADE2CB6306324A0E76BD415F55A634E1FB34746
MD5 SHA1 SHA512 SSDEEP TLSH

windows:4 windows x86 arch:x86

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

0

Major OS version

4

Entry point

636243

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LINE_NUMS_STRIPPED IMAGE_FILE_32BIT_MACHINE

PDB paths

kernel32

GetCurrentThreadId GetCurrentProcessId SetUnhandledExceptionFilter QueryPerformanceCounter TerminateProcess UnhandledExceptionFilter Sleep FreeLibrary MultiByteToWideChar WideCharToMultiByte HeapFree HeapAlloc LocalFree DeleteCriticalSection LeaveCriticalSection EnterCriticalSection WriteFile WaitForSingleObject GetProcessHeap CreateFileW ExitProcess GetModuleFileNameW GetStdHandle IsDebuggerPresent ReadFile GetACP FormatMessageW HeapReAlloc GetConsoleMode FlushFileBuffers TlsSetValue HeapSetInformation WriteConsoleW LoadLibraryW LoadLibraryExW CreateThread TlsFree SetFilePointer GetModuleFileNameA InitializeCriticalSectionAndSpinCount GetOEMCP GetEnvironmentStringsW SetStdHandle FreeEnvironmentStringsW FindNextFileW VirtualAlloc GetConsoleCP LocalAlloc GetCommandLineA DecodePointer SetEndOfFile ResetEvent ReleaseMutex CreateFileA OutputDebugStringW GetFileSize EncodePointer GetModuleHandleExW GetFullPathNameW LoadResource ExpandEnvironmentStringsW CreateProcessW

user32

DispatchMessageW DestroyWindow ReleaseDC SetWindowLongW GetMessageW GetDlgItem GetSystemMetrics GetDC GetWindowRect PostMessageW GetClientRect SetWindowPos IsWindow LoadCursorW EndDialog SetWindowTextW SetFocus SetForegroundWindow GetSysColor PeekMessageW BeginPaint ScreenToClient GetWindowTextW SystemParametersInfoW CharUpperW ClientToScreen

Sharing

General

Malware Config

Signatures

File Explorer

2026-06-30_ecc29a1c0b7a933b584b52befe3bc8bf_amadey_elex_glassworm_luca-stealer_njrat_smoke-loader

kernel32

user32

generic