2026-07-11_d3ba090ca2dd5a9665f18c68bd0c7083_amadey_elex_glassworm_luca-stealer_njrat_smoke-loader

General

Target
2026-07-11_d3ba090ca2dd5a9665f18c68bd0c7083_amadey_elex_glassworm_luca-stealer_njrat_smoke-loader
Size 4.0MB
Sample260711-sjd9psez91
SHA256 306c4508698fe7ea42fcdbb102dc029ab2550b39633b77d375aa68d80fc3ac88
MD5 d3ba090ca2dd5a9665f18c68bd0c7083
SHA1 9ed5b6a0535858908acaf5cb2bc48787ad54e547
SHA512 71d489d36a86821df570a582c0d3d64f35fe735ccf13b19075585928d795ce1c6594cbc1f90efc1d884e18a516a6df1caaf3e34fc5731088c861bcfb2004407d
SSDEEP 98304:vktB5JKv0yVB5SeCNVDVW0EJ2fkPYVhOVrwvJpG:k3goeCjIDlAfO
TLSH
T107161269F6428C73E5DE10BD677DCAB75A6CA130B32C48C7539404AADB306D23237E96
MD5 SHA1 SHA512 SSDEEP TLSH

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
2026-07-11_d3ba090ca2dd5a9665f18c68bd0c7083_amadey_elex_glassworm_luca-stealer_njrat_smoke-loader

File Explorer

2026-07-11_d3ba090ca2dd5a9665f18c68bd0c7083_amadey_elex_glassworm_luca-stealer_njrat_smoke-loader

.exe 4.0MB

2026-07-11_d3ba090ca2dd5a9665f18c68bd0c7083_amadey_elex_glassworm_luca-stealer_njrat_smoke-loader

IMPHASH 3325dc9d4e65819bb44aae72e3a54256
SHA256 306c4508698fe7ea42fcdbb102dc029ab2550b39633b77d375aa68d80fc3ac88
MD5 d3ba090ca2dd5a9665f18c68bd0c7083
SHA1 9ed5b6a0535858908acaf5cb2bc48787ad54e547
SHA512 71d489d36a86821df570a582c0d3d64f35fe735ccf13b19075585928d795ce1c6594cbc1f90efc1d884e18a516a6df1caaf3e34fc5731088c861bcfb2004407d
SSDEEP 98304:vktB5JKv0yVB5SeCNVDVW0EJ2fkPYVhOVrwvJpG:k3goeCjIDlAfO
TLSH
T107161269F6428C73E5DE10BD677DCAB75A6CA130B32C48C7539404AADB306D23237E96
MD5 SHA1 SHA512 SSDEEP TLSH

windows:4 windows x86 arch:x86

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

0

Major OS version

4

Entry point

8737

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LINE_NUMS_STRIPPED IMAGE_FILE_32BIT_MACHINE

PDB paths

kernel32

GetLastError GetCurrentProcess GetSystemTimeAsFileTime GetTickCount FreeLibrary MultiByteToWideChar WideCharToMultiByte SetLastError WriteFile WaitForSingleObject GetProcessHeap CreateFileW GetStdHandle GetStartupInfoW GetCommandLineW FindClose ReadFile RaiseException FormatMessageW GetFileType GetModuleHandleA HeapReAlloc GetConsoleMode FlushFileBuffers CreateEventW TlsAlloc HeapSize WriteConsoleW LoadLibraryExW CreateThread GetCPInfo SetFilePointer GetStringTypeW RtlUnwind LCMapStringW InitializeCriticalSectionAndSpinCount GetOEMCP GetEnvironmentStringsW IsProcessorFeaturePresent IsValidCodePage VirtualAlloc LocalAlloc ResetEvent GetVersionExW CreateFileA OutputDebugStringW GetFileSize EncodePointer lstrlenW GetModuleHandleExW GetLocaleInfoW LoadResource UnmapViewOfFile GetExitCodeProcess CreateProcessW

user32

TranslateMessage LoadStringW ShowWindow DestroyWindow ReleaseDC MessageBoxW PostQuitMessage SetWindowLongW GetWindowLongW GetMessageW GetDlgItem GetDC SendMessageW EnableWindow IsWindow LoadCursorW GetParent EndDialog SetWindowTextW SetTimer GetSysColor EndPaint KillTimer UpdateWindow

Sharing

General

Malware Config

Signatures

File Explorer

2026-07-11_d3ba090ca2dd5a9665f18c68bd0c7083_amadey_elex_glassworm_luca-stealer_njrat_smoke-loader

kernel32

user32

generic