2026-07-30_553d291fe053809e1c343b57fe94aaf3_amadey_elex_glassworm_luca-stealer_njrat_smoke-loader

General

Target
2026-07-30_553d291fe053809e1c343b57fe94aaf3_amadey_elex_glassworm_luca-stealer_njrat_smoke-loader
Size 4.0MB
Sample260730-2fynlsgf68
SHA256 3917811146aa96ac3633ba11b5c8f86812b7fc6dd7f3616c3336325373135830
MD5 553d291fe053809e1c343b57fe94aaf3
SHA1 0103536f0337e7f2f6ac1710ce3cface6f8ac215
SHA512 86d6595a78093ebf29c9f5ca24769799c0bd45a78bc0fc7c360b181d45537ca71764eb13b14503ab733b26f012f477a4fc1652a3fb09e9f6831b1bcd7a414944
SSDEEP 98304:DJ+qHn8ahDniKXh6VbgHH0RHkS8Z6n/hqSVrwvJpG:DoqcQmKXybgnhrUN
TLSH
T194161261FD41C0B7D38617F781B9977A4AA96733532490EF9E8005AF66700D23F39ACA
MD5 SHA1 SHA512 SSDEEP TLSH

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
2026-07-30_553d291fe053809e1c343b57fe94aaf3_amadey_elex_glassworm_luca-stealer_njrat_smoke-loader

File Explorer

2026-07-30_553d291fe053809e1c343b57fe94aaf3_amadey_elex_glassworm_luca-stealer_njrat_smoke-loader

.exe 4.0MB

2026-07-30_553d291fe053809e1c343b57fe94aaf3_amadey_elex_glassworm_luca-stealer_njrat_smoke-loader

IMPHASH 572eef926f7d70163b9ef2da92774565
SHA256 3917811146aa96ac3633ba11b5c8f86812b7fc6dd7f3616c3336325373135830
MD5 553d291fe053809e1c343b57fe94aaf3
SHA1 0103536f0337e7f2f6ac1710ce3cface6f8ac215
SHA512 86d6595a78093ebf29c9f5ca24769799c0bd45a78bc0fc7c360b181d45537ca71764eb13b14503ab733b26f012f477a4fc1652a3fb09e9f6831b1bcd7a414944
SSDEEP 98304:DJ+qHn8ahDniKXh6VbgHH0RHkS8Z6n/hqSVrwvJpG:DoqcQmKXybgnhrUN
TLSH
T194161261FD41C0B7D38617F781B9977A4AA96733532490EF9E8005AF66700D23F39ACA
MD5 SHA1 SHA512 SSDEEP TLSH

windows:4 windows x86 arch:x86

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

0

Major OS version

4

Entry point

3551556

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LINE_NUMS_STRIPPED IMAGE_FILE_32BIT_MACHINE

PDB paths

kernel32

GetCurrentThreadId GetModuleHandleW GetProcAddress CloseHandle GetTickCount WideCharToMultiByte LocalFree DeleteCriticalSection LeaveCriticalSection EnterCriticalSection GetProcessHeap CreateFileW GetModuleFileNameW GetStdHandle GetStartupInfoW FindClose ReadFile RaiseException SetEvent GetACP TlsGetValue GetModuleHandleA InitializeCriticalSection TlsSetValue CreateEventW WriteConsoleW LoadLibraryExW TlsFree SetFilePointer RtlUnwind LCMapStringW InitializeCriticalSectionAndSpinCount SetStdHandle FindNextFileW DeleteFileW VirtualAlloc GetConsoleCP GetCommandLineA SetEndOfFile ResetEvent ReleaseMutex CreateFileA EncodePointer VirtualFree lstrlenW LoadLibraryA GetModuleHandleExW CreateDirectoryW LoadResource UnmapViewOfFile GetExitCodeProcess ExpandEnvironmentStringsW CreateProcessW

user32

LoadStringW ReleaseDC DefWindowProcW CreateWindowExW GetWindowLongW GetMessageW GetDlgItem PostMessageW SendMessageW SetWindowPos IsWindow LoadCursorW SetTimer SetForegroundWindow GetSysColor BeginPaint ScreenToClient SetCursor KillTimer InvalidateRect RegisterClassW GetWindow UpdateWindow SystemParametersInfoW GetKeyState MessageBoxA

Sharing

General

Malware Config

Signatures

File Explorer

2026-07-30_553d291fe053809e1c343b57fe94aaf3_amadey_elex_glassworm_luca-stealer_njrat_smoke-loader

kernel32

user32

generic