2026-07-19_09ff0c29d4a6b1eb1a1c1c5aa00d5c0d_amadey_elex_glassworm_luca-stealer_njrat_smoke-loader

General

Target
2026-07-19_09ff0c29d4a6b1eb1a1c1c5aa00d5c0d_amadey_elex_glassworm_luca-stealer_njrat_smoke-loader
Size 4.0MB
Sample260719-3qf2zsbs8x
SHA256 fc7ac857d30360974e83da08af19c3bfb1def835786719cc4b690f40f4c0a1cb
MD5 09ff0c29d4a6b1eb1a1c1c5aa00d5c0d
SHA1 6f65c739e647933b9bd9936e21608fd7c42cf68c
SHA512 521f6672d9f3411c1f8c5ef91e18a88e78e15fe9ea405d40b85ff8590b37efcd87f4540b883a351ef20316e2da599231626e342dd824c9b1fb13b469e5f13f87
SSDEEP 98304:26RubJAvI2gunLQDRxKQBqBTrQr9M3/mVrwvJpG:22nA2eDvkBTrQM+
TLSH
T147161231BE00C676F0E62472A1FDC7BF792E632957A8C0C752911DA4B7A44C27A35BD2
MD5 SHA1 SHA512 SSDEEP TLSH

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
2026-07-19_09ff0c29d4a6b1eb1a1c1c5aa00d5c0d_amadey_elex_glassworm_luca-stealer_njrat_smoke-loader

File Explorer

2026-07-19_09ff0c29d4a6b1eb1a1c1c5aa00d5c0d_amadey_elex_glassworm_luca-stealer_njrat_smoke-loader

.exe 4.0MB

2026-07-19_09ff0c29d4a6b1eb1a1c1c5aa00d5c0d_amadey_elex_glassworm_luca-stealer_njrat_smoke-loader

IMPHASH 5245d07927251f24c3eeb04c59d988a4
SHA256 fc7ac857d30360974e83da08af19c3bfb1def835786719cc4b690f40f4c0a1cb
MD5 09ff0c29d4a6b1eb1a1c1c5aa00d5c0d
SHA1 6f65c739e647933b9bd9936e21608fd7c42cf68c
SHA512 521f6672d9f3411c1f8c5ef91e18a88e78e15fe9ea405d40b85ff8590b37efcd87f4540b883a351ef20316e2da599231626e342dd824c9b1fb13b469e5f13f87
SSDEEP 98304:26RubJAvI2gunLQDRxKQBqBTrQr9M3/mVrwvJpG:22nA2eDvkBTrQM+
TLSH
T147161231BE00C676F0E62472A1FDC7BF792E632957A8C0C752911DA4B7A44C27A35BD2
MD5 SHA1 SHA512 SSDEEP TLSH

windows:4 windows x86 arch:x86

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

0

Major OS version

4

Entry point

3554742

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LINE_NUMS_STRIPPED IMAGE_FILE_32BIT_MACHINE

PDB paths

kernel32

GetCurrentProcessId GetSystemTimeAsFileTime QueryPerformanceCounter GetProcAddress CloseHandle UnhandledExceptionFilter GetTickCount MultiByteToWideChar SetLastError LocalFree DeleteCriticalSection EnterCriticalSection ExitProcess GetModuleFileNameW GetStdHandle GetStartupInfoW IsDebuggerPresent GetCommandLineW FindClose ReadFile RaiseException GetACP FormatMessageW GetFileType TlsGetValue WriteConsoleW LoadLibraryExW CreateThread GetCPInfo TlsFree SetFilePointer CompareStringW RtlUnwind LCMapStringW GetModuleFileNameA GetOEMCP GetEnvironmentStringsW SetStdHandle FreeEnvironmentStringsW FindNextFileW IsValidCodePage DeleteFileW VirtualAlloc GetConsoleCP LocalAlloc GetCommandLineA DecodePointer SetEndOfFile ResetEvent GetVersionExW ReleaseMutex CreateFileA EncodePointer VirtualFree lstrlenW GetLocaleInfoW LoadResource UnmapViewOfFile GetExitCodeProcess ExpandEnvironmentStringsW

user32

TranslateMessage LoadStringW ShowWindow DefWindowProcW PostQuitMessage CreateWindowExW SetWindowLongW GetMessageW GetDlgItem GetSystemMetrics GetWindowRect PostMessageW SendMessageW SetWindowPos EnableWindow IsWindow GetParent SetWindowTextW LoadIconW SetFocus PeekMessageW BeginPaint SetCursor KillTimer EnableMenuItem GetWindowTextW ClientToScreen

Sharing

General

Malware Config

Signatures

File Explorer

2026-07-19_09ff0c29d4a6b1eb1a1c1c5aa00d5c0d_amadey_elex_glassworm_luca-stealer_njrat_smoke-loader

kernel32

user32

generic