2026-07-07_47a3bf83a316622af4fe6a2a0f9fce71_amadey_elex_glassworm_luca-stealer_njrat_smoke-loader

General

Target
2026-07-07_47a3bf83a316622af4fe6a2a0f9fce71_amadey_elex_glassworm_luca-stealer_njrat_smoke-loader
Size 4.0MB
Sample260707-tr6vcsas2l
SHA256 67aa2b30e3df396d50cc720180895c3139ed30d2bc28b7e3e2a70fb35de18f21
MD5 47a3bf83a316622af4fe6a2a0f9fce71
SHA1 bcd499a7a6597e33e89afd23c795384f18bd0a08
SHA512 fcb18f4fffa411a00fff84b7b99e9fc695d08e082c72cc8baadb719fdb9f45b11ae36dcd3febcbafc0736ea2211f0a8557215f5e932cf5dcd9b9838a192ebebd
SSDEEP 49152:z9x+EbaWOhz33/wLXwxXxUrcLf6vj0OXFz9wvJpGVb:z9x+EbaHhzbB+rdLVrwvJpG
TLSH
T1C316BE5B6442B061F4D230746D6FEE6E293811111FF96EF722E310AF2A948D56B3363B
MD5 SHA1 SHA512 SSDEEP TLSH

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
2026-07-07_47a3bf83a316622af4fe6a2a0f9fce71_amadey_elex_glassworm_luca-stealer_njrat_smoke-loader

File Explorer

2026-07-07_47a3bf83a316622af4fe6a2a0f9fce71_amadey_elex_glassworm_luca-stealer_njrat_smoke-loader

.exe 4.0MB

2026-07-07_47a3bf83a316622af4fe6a2a0f9fce71_amadey_elex_glassworm_luca-stealer_njrat_smoke-loader

IMPHASH f422a27b7747ad79e1d09b73f5921603
SHA256 67aa2b30e3df396d50cc720180895c3139ed30d2bc28b7e3e2a70fb35de18f21
MD5 47a3bf83a316622af4fe6a2a0f9fce71
SHA1 bcd499a7a6597e33e89afd23c795384f18bd0a08
SHA512 fcb18f4fffa411a00fff84b7b99e9fc695d08e082c72cc8baadb719fdb9f45b11ae36dcd3febcbafc0736ea2211f0a8557215f5e932cf5dcd9b9838a192ebebd
SSDEEP 49152:z9x+EbaWOhz33/wLXwxXxUrcLf6vj0OXFz9wvJpGVb:z9x+EbaHhzbB+rdLVrwvJpG
TLSH
T1C316BE5B6442B061F4D230746D6FEE6E293811111FF96EF722E310AF2A948D56B3363B
MD5 SHA1 SHA512 SSDEEP TLSH

windows:4 windows x86 arch:x86

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

0

Major OS version

4

Entry point

3552050

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LINE_NUMS_STRIPPED IMAGE_FILE_32BIT_MACHINE

PDB paths

kernel32

GetCurrentProcess SetUnhandledExceptionFilter GetModuleHandleW QueryPerformanceCounter GetProcAddress FreeLibrary MultiByteToWideChar WideCharToMultiByte HeapFree HeapAlloc LocalFree DeleteCriticalSection EnterCriticalSection WriteFile WaitForSingleObject CreateFileW GetModuleFileNameW IsDebuggerPresent GetCommandLineW FindClose ReadFile SetEvent GetModuleHandleA HeapReAlloc GetConsoleMode FlushFileBuffers TlsAlloc HeapSetInformation HeapSize CreateThread GetFileAttributesW GetStringTypeW RtlUnwind LCMapStringW GetModuleFileNameA InitializeCriticalSectionAndSpinCount GetOEMCP GetEnvironmentStringsW SetStdHandle IsProcessorFeaturePresent IsValidCodePage FindFirstFileW VirtualAlloc GetConsoleCP LocalAlloc GetCommandLineA GetVersionExW ReleaseMutex CreateFileA VirtualFree lstrlenW GetLocaleInfoW CreateDirectoryW LoadResource UnmapViewOfFile ExpandEnvironmentStringsW

user32

LoadStringW DispatchMessageW ShowWindow DestroyWindow DefWindowProcW MessageBoxW PostQuitMessage SetWindowLongW GetWindowLongW GetMessageW GetSystemMetrics GetClientRect SetWindowPos EnableWindow EndDialog SetWindowTextW SetTimer SetFocus SetForegroundWindow ScreenToClient UpdateWindow

Sharing

General

Malware Config

Signatures

File Explorer

2026-07-07_47a3bf83a316622af4fe6a2a0f9fce71_amadey_elex_glassworm_luca-stealer_njrat_smoke-loader

kernel32

user32

generic