2026-07-05_80ebd4e22b7a978af5dc3dac16f512d8_amadey_elex_glassworm_luca-stealer_njrat_smoke-loader

General

Target
2026-07-05_80ebd4e22b7a978af5dc3dac16f512d8_amadey_elex_glassworm_luca-stealer_njrat_smoke-loader
Size 4.0MB
Sample260705-thsalsht6p
SHA256 5f92d1d66b1589f6bc0747151c8ade4c459391b987fce35bf20855db857ddf8c
MD5 80ebd4e22b7a978af5dc3dac16f512d8
SHA1 4d20b415ecdcd402d6e1acbf78a11b83c2147968
SHA512 4c14986ee159a3cfaa0529c13868cc49c7caa846b365fe8dcfde97829d275b2fc0afded036a501e473753388663d3b0659467c40d3d8618b1be26d7f9fff5421
SSDEEP 49152:Og0OXFz9wvJpGVbwtrpjRXOzrtpDqofQi2QQzdS5WOX:1VrwvJpGkRXO3tUWZ2QQN
TLSH
T19F16CF3E6871A4E2D1BDCC7297AA7D76393876D02B25FFE31E441CB45B200D2AD38586
MD5 SHA1 SHA512 SSDEEP TLSH

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
2026-07-05_80ebd4e22b7a978af5dc3dac16f512d8_amadey_elex_glassworm_luca-stealer_njrat_smoke-loader

File Explorer

2026-07-05_80ebd4e22b7a978af5dc3dac16f512d8_amadey_elex_glassworm_luca-stealer_njrat_smoke-loader

.exe 4.0MB

2026-07-05_80ebd4e22b7a978af5dc3dac16f512d8_amadey_elex_glassworm_luca-stealer_njrat_smoke-loader

IMPHASH 2589dbf37adf949e6d640bffb9dcca32
SHA256 5f92d1d66b1589f6bc0747151c8ade4c459391b987fce35bf20855db857ddf8c
MD5 80ebd4e22b7a978af5dc3dac16f512d8
SHA1 4d20b415ecdcd402d6e1acbf78a11b83c2147968
SHA512 4c14986ee159a3cfaa0529c13868cc49c7caa846b365fe8dcfde97829d275b2fc0afded036a501e473753388663d3b0659467c40d3d8618b1be26d7f9fff5421
SSDEEP 49152:Og0OXFz9wvJpGVbwtrpjRXOzrtpDqofQi2QQzdS5WOX:1VrwvJpGkRXO3tUWZ2QQN
TLSH
T19F16CF3E6871A4E2D1BDCC7297AA7D76393876D02B25FFE31E441CB45B200D2AD38586
MD5 SHA1 SHA512 SSDEEP TLSH

windows:4 windows x86 arch:x86

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

0

Major OS version

4

Entry point

4172

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LINE_NUMS_STRIPPED IMAGE_FILE_32BIT_MACHINE

PDB paths

kernel32

GetLastError GetCurrentProcess GetSystemTimeAsFileTime SetUnhandledExceptionFilter QueryPerformanceCounter GetProcAddress TerminateProcess Sleep MultiByteToWideChar WideCharToMultiByte SetLastError EnterCriticalSection GetProcessHeap CreateFileW ExitProcess GetStdHandle IsDebuggerPresent RaiseException SetEvent FormatMessageW GetConsoleMode FlushFileBuffers CreateEventW WriteConsoleW LoadLibraryExW CreateThread SetFilePointer CompareStringW GetStringTypeW RtlUnwind InitializeCriticalSectionAndSpinCount GetOEMCP SetStdHandle FreeEnvironmentStringsW IsProcessorFeaturePresent FindNextFileW IsValidCodePage DeleteFileW GetCommandLineA DecodePointer ResetEvent GetVersionExW VirtualFree lstrlenW LoadLibraryA GetLocaleInfoW CreateDirectoryW GetExitCodeProcess

user32

LoadStringW DestroyWindow MessageBoxW PostQuitMessage SetWindowLongW GetWindowLongW GetMessageW GetSystemMetrics GetDC GetWindowRect GetClientRect SetWindowPos EnableWindow IsWindow EndDialog SetWindowTextW SetTimer SetForegroundWindow GetSysColor PeekMessageW EndPaint ScreenToClient SetCursor KillTimer InvalidateRect EnableMenuItem GetWindow GetWindowTextW GetKeyState MessageBoxA ClientToScreen

Sharing

General

Malware Config

Signatures

File Explorer

2026-07-05_80ebd4e22b7a978af5dc3dac16f512d8_amadey_elex_glassworm_luca-stealer_njrat_smoke-loader

kernel32

user32

generic