2026-07-21_a6674adf0f3d0f881b011aa85bd79e71_amadey_elex_glassworm_luca-stealer_njrat_smoke-loader

General

Target
2026-07-21_a6674adf0f3d0f881b011aa85bd79e71_amadey_elex_glassworm_luca-stealer_njrat_smoke-loader
Size 4.0MB
Sample260721-3trynasyfs
SHA256 7c2b1c957bd39513ae6003b01aacfbf7482702ed401c0c5446359166bd2f6813
MD5 a6674adf0f3d0f881b011aa85bd79e71
SHA1 545c0574c5da7b3ca1addff56eab2515f2c84355
SHA512 d7ab60b077920dce21aeeb1103681ca3f7f62c7c9569eba01dc306d68482d013f13cb4c676fb962bc241da8da217c7146b5711da2400d92dae7b44e7dc6d3f35
SSDEEP 49152:tzBprIcOJNGVRmgBSxrJqwORC0OXFz9wvJpGVb:tFO7i0gzwORCVrwvJpG
TLSH
T149169B916881C022ED91017EDDA4B73A5A3B7D605F2C98C7B2787CD04AE07F325E967B
MD5 SHA1 SHA512 SSDEEP TLSH

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
2026-07-21_a6674adf0f3d0f881b011aa85bd79e71_amadey_elex_glassworm_luca-stealer_njrat_smoke-loader

File Explorer

2026-07-21_a6674adf0f3d0f881b011aa85bd79e71_amadey_elex_glassworm_luca-stealer_njrat_smoke-loader

.exe 4.0MB

2026-07-21_a6674adf0f3d0f881b011aa85bd79e71_amadey_elex_glassworm_luca-stealer_njrat_smoke-loader

IMPHASH d1843b7833a07e48c90a3d3c68d711db
SHA256 7c2b1c957bd39513ae6003b01aacfbf7482702ed401c0c5446359166bd2f6813
MD5 a6674adf0f3d0f881b011aa85bd79e71
SHA1 545c0574c5da7b3ca1addff56eab2515f2c84355
SHA512 d7ab60b077920dce21aeeb1103681ca3f7f62c7c9569eba01dc306d68482d013f13cb4c676fb962bc241da8da217c7146b5711da2400d92dae7b44e7dc6d3f35
SSDEEP 49152:tzBprIcOJNGVRmgBSxrJqwORC0OXFz9wvJpGVb:tFO7i0gzwORCVrwvJpG
TLSH
T149169B916881C022ED91017EDDA4B73A5A3B7D605F2C98C7B2787CD04AE07F325E967B
MD5 SHA1 SHA512 SSDEEP TLSH

windows:4 windows x86 arch:x86

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

0

Major OS version

4

Entry point

4182462

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LINE_NUMS_STRIPPED IMAGE_FILE_32BIT_MACHINE

PDB paths

kernel32

GetSystemTimeAsFileTime GetProcAddress CloseHandle UnhandledExceptionFilter Sleep GetTickCount FreeLibrary HeapAlloc LocalFree DeleteCriticalSection LeaveCriticalSection WriteFile WaitForSingleObject GetProcessHeap CreateFileW ExitProcess GetModuleFileNameW IsDebuggerPresent FindClose ReadFile RaiseException SetEvent GetFileType TlsGetValue InitializeCriticalSection FlushFileBuffers TlsSetValue HeapSetInformation HeapSize WriteConsoleW LoadLibraryExW GetFileAttributesW GetStringTypeW RtlUnwind LCMapStringW SetStdHandle FindNextFileW FindFirstFileW DeleteFileW GetConsoleCP LocalAlloc GetCommandLineA DecodePointer SetEndOfFile ReleaseMutex CreateFileA OutputDebugStringW GetFileSize VirtualFree lstrlenW LoadLibraryA CreateDirectoryW LoadResource CreateProcessW

user32

TranslateMessage DispatchMessageW ShowWindow ReleaseDC DefWindowProcW MessageBoxW PostQuitMessage CreateWindowExW SetWindowLongW GetSystemMetrics GetDC SendMessageW SetWindowPos GetParent EndDialog SetWindowTextW LoadIconW SetFocus SetForegroundWindow EndPaint BeginPaint ScreenToClient KillTimer InvalidateRect GetWindow GetWindowTextW GetKeyState MessageBoxA CharUpperW ClientToScreen

Sharing

General

Malware Config

Signatures

File Explorer

2026-07-21_a6674adf0f3d0f881b011aa85bd79e71_amadey_elex_glassworm_luca-stealer_njrat_smoke-loader

kernel32

user32

generic