2026-07-02_aac693d1c96f26ea57984b14e3f4b3d4_amadey_elex_glassworm_luca-stealer_njrat_smoke-loader

General

Target
2026-07-02_aac693d1c96f26ea57984b14e3f4b3d4_amadey_elex_glassworm_luca-stealer_njrat_smoke-loader
Size 4.0MB
Sample260702-vcxtksfs8p
SHA256 43687405f44df970651fe617742c2655963f9ece23a86db44a587b2f89658bd5
MD5 aac693d1c96f26ea57984b14e3f4b3d4
SHA1 9e71f5f55f3e8a9bbefe908d070cca7c704234e4
SHA512 6e7addb5d28180295bf35fdc883b3aff27c571d6d0474900048fdffce907f692ebff8ced5627685ab06a5da86dd015975449e2ef29d4b8fa180fa08d7ce5584f
SSDEEP 98304:kM1YXfpTFw/D2pXExiSRUtOBVErwM6PVrwvJpG:kMmBu7eExN6hR6P
TLSH
T12E1612E1AD41B072F2B6107AD1E99B3F4A2C5B24231C94C72B9010F1FAA95D3773D67A
MD5 SHA1 SHA512 SSDEEP TLSH

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
2026-07-02_aac693d1c96f26ea57984b14e3f4b3d4_amadey_elex_glassworm_luca-stealer_njrat_smoke-loader

File Explorer

2026-07-02_aac693d1c96f26ea57984b14e3f4b3d4_amadey_elex_glassworm_luca-stealer_njrat_smoke-loader

.exe 4.0MB

2026-07-02_aac693d1c96f26ea57984b14e3f4b3d4_amadey_elex_glassworm_luca-stealer_njrat_smoke-loader

IMPHASH d4319582d39264e5a4768c7d27d053e0
SHA256 43687405f44df970651fe617742c2655963f9ece23a86db44a587b2f89658bd5
MD5 aac693d1c96f26ea57984b14e3f4b3d4
SHA1 9e71f5f55f3e8a9bbefe908d070cca7c704234e4
SHA512 6e7addb5d28180295bf35fdc883b3aff27c571d6d0474900048fdffce907f692ebff8ced5627685ab06a5da86dd015975449e2ef29d4b8fa180fa08d7ce5584f
SSDEEP 98304:kM1YXfpTFw/D2pXExiSRUtOBVErwM6PVrwvJpG:kMmBu7eExN6hR6P
TLSH
T12E1612E1AD41B072F2B6107AD1E99B3F4A2C5B24231C94C72B9010F1FAA95D3773D67A
MD5 SHA1 SHA512 SSDEEP TLSH

windows:4 windows x86 arch:x86

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

0

Major OS version

4

Entry point

9810

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LINE_NUMS_STRIPPED IMAGE_FILE_32BIT_MACHINE

PDB paths

kernel32

GetLastError GetCurrentThreadId GetModuleHandleW GetProcAddress CloseHandle Sleep MultiByteToWideChar WideCharToMultiByte SetLastError HeapAlloc LocalFree DeleteCriticalSection WriteFile WaitForSingleObject GetProcessHeap CreateFileW ExitProcess GetStdHandle GetStartupInfoW IsDebuggerPresent RaiseException GetACP FormatMessageW GetFileType InitializeCriticalSection GetConsoleMode TlsSetValue TlsAlloc WriteConsoleW LoadLibraryW LoadLibraryExW GetCPInfo TlsFree SetFilePointer CompareStringW GetStringTypeW RtlUnwind LCMapStringW GetModuleFileNameA InitializeCriticalSectionAndSpinCount GetOEMCP GetEnvironmentStringsW SetStdHandle FreeEnvironmentStringsW IsProcessorFeaturePresent FindNextFileW IsValidCodePage DeleteFileW LocalAlloc SetEndOfFile ResetEvent GetFileSize EncodePointer VirtualFree lstrlenW GetLocaleInfoW GetFullPathNameW LoadResource UnmapViewOfFile GetExitCodeProcess CreateProcessW

user32

TranslateMessage DefWindowProcW MessageBoxW PostQuitMessage CreateWindowExW SetWindowLongW GetWindowLongW GetDlgItem PostMessageW SendMessageW GetClientRect SetWindowPos EnableWindow IsWindow LoadCursorW EndDialog SetWindowTextW SetTimer LoadIconW SetFocus EndPaint SetCursor KillTimer EnableMenuItem GetWindow SystemParametersInfoW MessageBoxA CharUpperW

Sharing

General

Malware Config

Signatures

File Explorer

2026-07-02_aac693d1c96f26ea57984b14e3f4b3d4_amadey_elex_glassworm_luca-stealer_njrat_smoke-loader

kernel32

user32

generic