2026-07-07_bb74651ac0146641f657076a4bed5047_amadey_elex_glassworm_luca-stealer_njrat_smoke-loader

General

Target
2026-07-07_bb74651ac0146641f657076a4bed5047_amadey_elex_glassworm_luca-stealer_njrat_smoke-loader
Size 4.0MB
Sample260707-s5pbsshv2j
SHA256 ad1d3e0413ef0cbdf457e25841cc64fc89f5f431d38a3a13135720d7a7a8e251
MD5 bb74651ac0146641f657076a4bed5047
SHA1 22b380db005a6c80f5995ea5533b4811d6fa3183
SHA512 d4c8abccc1207ee2eaa491ef6d167bad48e43c71fa5115792604b8f1adb0bb7f3536f3320e8ba40d8bb8900212fcc6e82b61e618b0bd8d38c0b834197592315c
SSDEEP 98304:P1CnWDixLi/nDB3zGrvsoE303+2Z1pP69paGPMN4QfVrwvJpG:PonWOxLgGDsoEEBZ1pyO9f
TLSH
T1D1161221B54251F2E1D284B1A1FE9A72DA3C7D29D3A040DB6BC1166CD76CDE32B35B23
MD5 SHA1 SHA512 SSDEEP TLSH

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
2026-07-07_bb74651ac0146641f657076a4bed5047_amadey_elex_glassworm_luca-stealer_njrat_smoke-loader

File Explorer

2026-07-07_bb74651ac0146641f657076a4bed5047_amadey_elex_glassworm_luca-stealer_njrat_smoke-loader

.exe 4.0MB

2026-07-07_bb74651ac0146641f657076a4bed5047_amadey_elex_glassworm_luca-stealer_njrat_smoke-loader

IMPHASH 679320fb48ea0d9d1431389f1394ec25
SHA256 ad1d3e0413ef0cbdf457e25841cc64fc89f5f431d38a3a13135720d7a7a8e251
MD5 bb74651ac0146641f657076a4bed5047
SHA1 22b380db005a6c80f5995ea5533b4811d6fa3183
SHA512 d4c8abccc1207ee2eaa491ef6d167bad48e43c71fa5115792604b8f1adb0bb7f3536f3320e8ba40d8bb8900212fcc6e82b61e618b0bd8d38c0b834197592315c
SSDEEP 98304:P1CnWDixLi/nDB3zGrvsoE303+2Z1pP69paGPMN4QfVrwvJpG:PonWOxLgGDsoEEBZ1pyO9f
TLSH
T1D1161221B54251F2E1D284B1A1FE9A72DA3C7D29D3A040DB6BC1166CD76CDE32B35B23
MD5 SHA1 SHA512 SSDEEP TLSH

windows:4 windows x86 arch:x86

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

0

Major OS version

4

Entry point

4180230

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LINE_NUMS_STRIPPED IMAGE_FILE_32BIT_MACHINE

PDB paths

kernel32

GetLastError GetCurrentThreadId GetSystemTimeAsFileTime SetUnhandledExceptionFilter GetProcAddress UnhandledExceptionFilter Sleep HeapFree HeapAlloc LocalFree DeleteCriticalSection WriteFile WaitForSingleObject GetProcessHeap GetModuleFileNameW GetStdHandle GetStartupInfoW IsDebuggerPresent ReadFile RaiseException SetEvent GetModuleHandleA InitializeCriticalSection FlushFileBuffers TlsSetValue HeapSetInformation HeapSize LoadLibraryW LoadLibraryExW CreateThread TlsFree SetFilePointer GetFileAttributesW CompareStringW GetStringTypeW LCMapStringW GetModuleFileNameA InitializeCriticalSectionAndSpinCount SetStdHandle FindNextFileW IsValidCodePage FindFirstFileW VirtualAlloc GetCommandLineA DecodePointer SetEndOfFile ResetEvent OutputDebugStringW EncodePointer VirtualFree lstrlenW CreateDirectoryW LoadResource UnmapViewOfFile

user32

TranslateMessage LoadStringW ShowWindow DestroyWindow DefWindowProcW SetWindowLongW GetWindowLongW GetMessageW GetDlgItem GetDC SendMessageW GetClientRect SetWindowPos IsWindow EndDialog SetFocus ScreenToClient SetCursor KillTimer InvalidateRect GetWindowTextW SystemParametersInfoW GetKeyState MessageBoxA ClientToScreen

Sharing

General

Malware Config

Signatures

File Explorer

2026-07-07_bb74651ac0146641f657076a4bed5047_amadey_elex_glassworm_luca-stealer_njrat_smoke-loader

kernel32

user32

generic