2026-07-23_7358f6a85565e7cc3aac2602eecdeff5_amadey_elex_glassworm_luca-stealer_njrat_smoke-loader

General

Target
2026-07-23_7358f6a85565e7cc3aac2602eecdeff5_amadey_elex_glassworm_luca-stealer_njrat_smoke-loader
Size 4.0MB
Sample260723-v2thfsgp5s
SHA256 318538e516b35dee4cb17afcf4d777edb5fed1300774a6c423bbfb553c065133
MD5 7358f6a85565e7cc3aac2602eecdeff5
SHA1 bf5c215aaf3f9a2d0347376104308e20ee39cf3d
SHA512 6fbec21273cfa211049d7d35c9a9f677d49a27b5943ecb4bb181e9e63f6fde8d6c64e7cf634c0fe8eb95de966849fc1765c2c81d3482024b6eae2d8c49e57725
SSDEEP 98304:m8t3RvJvbs/BWd8s1B0nKCOdsWofuzc8ciWDzsaCjVrwvJpG:1tvs/BWiyB0nKCCsTGg8ciWfCj
TLSH
T1EB1612207C82E3F3E5B302BB9168EB767A3C62215B2D45F72F9015E459640E376BD6C2
MD5 SHA1 SHA512 SSDEEP TLSH

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
2026-07-23_7358f6a85565e7cc3aac2602eecdeff5_amadey_elex_glassworm_luca-stealer_njrat_smoke-loader

File Explorer

2026-07-23_7358f6a85565e7cc3aac2602eecdeff5_amadey_elex_glassworm_luca-stealer_njrat_smoke-loader

.exe 4.0MB

2026-07-23_7358f6a85565e7cc3aac2602eecdeff5_amadey_elex_glassworm_luca-stealer_njrat_smoke-loader

IMPHASH ef63d78c0e0a24cbb64324912bad79d0
SHA256 318538e516b35dee4cb17afcf4d777edb5fed1300774a6c423bbfb553c065133
MD5 7358f6a85565e7cc3aac2602eecdeff5
SHA1 bf5c215aaf3f9a2d0347376104308e20ee39cf3d
SHA512 6fbec21273cfa211049d7d35c9a9f677d49a27b5943ecb4bb181e9e63f6fde8d6c64e7cf634c0fe8eb95de966849fc1765c2c81d3482024b6eae2d8c49e57725
SSDEEP 98304:m8t3RvJvbs/BWd8s1B0nKCOdsWofuzc8ciWDzsaCjVrwvJpG:1tvs/BWiyB0nKCCsTGg8ciWfCj
TLSH
T1EB1612207C82E3F3E5B302BB9168EB767A3C62215B2D45F72F9015E459640E376BD6C2
MD5 SHA1 SHA512 SSDEEP TLSH

windows:4 windows x86 arch:x86

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

0

Major OS version

4

Entry point

4182098

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LINE_NUMS_STRIPPED IMAGE_FILE_32BIT_MACHINE

PDB paths

kernel32

GetCurrentThreadId GetCurrentProcess GetCurrentProcessId GetProcAddress TerminateProcess UnhandledExceptionFilter Sleep GetTickCount FreeLibrary MultiByteToWideChar WideCharToMultiByte SetLastError HeapFree LocalFree WaitForSingleObject CreateFileW GetModuleFileNameW GetStdHandle GetStartupInfoW GetCommandLineW RaiseException GetModuleHandleA InitializeCriticalSection HeapReAlloc GetConsoleMode HeapSize WriteConsoleW LoadLibraryW GetCPInfo TlsFree GetFileAttributesW CompareStringW GetStringTypeW RtlUnwind LCMapStringW GetModuleFileNameA InitializeCriticalSectionAndSpinCount GetOEMCP IsValidCodePage FindFirstFileW GetVersionExW ReleaseMutex CreateFileA OutputDebugStringW VirtualFree LoadLibraryA GetModuleHandleExW GetLocaleInfoW GetFullPathNameW LoadResource GetExitCodeProcess

user32

TranslateMessage DispatchMessageW DestroyWindow MessageBoxW CreateWindowExW SetWindowLongW GetClientRect SetWindowPos IsWindow LoadCursorW SetWindowTextW SetTimer SetFocus SetForegroundWindow GetSysColor PeekMessageW BeginPaint ScreenToClient InvalidateRect RegisterClassW EnableMenuItem GetWindow GetWindowTextW UpdateWindow SystemParametersInfoW CharUpperW

Sharing

General

Malware Config

Signatures

File Explorer

2026-07-23_7358f6a85565e7cc3aac2602eecdeff5_amadey_elex_glassworm_luca-stealer_njrat_smoke-loader

kernel32

user32

generic