2026-08-01_5bf1a4c8db4dede9d524b4689dbe1162_amadey_elex_glassworm_luca-stealer_njrat_smoke-loader

General

Target
2026-08-01_5bf1a4c8db4dede9d524b4689dbe1162_amadey_elex_glassworm_luca-stealer_njrat_smoke-loader
Size 4.0MB
Sample260802-az9rfaba84
SHA256 38abc877dba57c09f019901eebcc156cd40ef70c5defd84431cae528497a54a1
MD5 5bf1a4c8db4dede9d524b4689dbe1162
SHA1 75d3b146e0205cc0cddeefbba8f80fa620579916
SHA512 2a42bf2524f0c6682bc59e5f409970b666ff09e0f1856c85aa895760f2ca4227c48ceb9e4cc6fc1467eda0434928a6c279189664067f4a462260281a4c76f136
SSDEEP 49152:mPwh+OzYNXarjZ4XMD2FRJXj0OXFz9wvJpGVb:mPwhrUNq4XMD2RXjVrwvJpG
TLSH
T17D16BEE26EC5ACA1E3B609F85E76477E0B382D14231C5FC7B78418A44D60CED1AED2B5
MD5 SHA1 SHA512 SSDEEP TLSH

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
2026-08-01_5bf1a4c8db4dede9d524b4689dbe1162_amadey_elex_glassworm_luca-stealer_njrat_smoke-loader

File Explorer

2026-08-01_5bf1a4c8db4dede9d524b4689dbe1162_amadey_elex_glassworm_luca-stealer_njrat_smoke-loader

.exe 4.0MB

2026-08-01_5bf1a4c8db4dede9d524b4689dbe1162_amadey_elex_glassworm_luca-stealer_njrat_smoke-loader

IMPHASH a4a11b0c3c5ffb72e7e29951fc465d33
SHA256 38abc877dba57c09f019901eebcc156cd40ef70c5defd84431cae528497a54a1
MD5 5bf1a4c8db4dede9d524b4689dbe1162
SHA1 75d3b146e0205cc0cddeefbba8f80fa620579916
SHA512 2a42bf2524f0c6682bc59e5f409970b666ff09e0f1856c85aa895760f2ca4227c48ceb9e4cc6fc1467eda0434928a6c279189664067f4a462260281a4c76f136
SSDEEP 49152:mPwh+OzYNXarjZ4XMD2FRJXj0OXFz9wvJpGVb:mPwhrUNq4XMD2RXjVrwvJpG
TLSH
T17D16BEE26EC5ACA1E3B609F85E76477E0B382D14231C5FC7B78418A44D60CED1AED2B5
MD5 SHA1 SHA512 SSDEEP TLSH

windows:4 windows x86 arch:x86

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

0

Major OS version

4

Entry point

4177820

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LINE_NUMS_STRIPPED IMAGE_FILE_32BIT_MACHINE

PDB paths

kernel32

GetCurrentThreadId GetCurrentProcessId GetSystemTimeAsFileTime SetUnhandledExceptionFilter GetModuleHandleW GetProcAddress CloseHandle TerminateProcess UnhandledExceptionFilter Sleep FreeLibrary SetLastError HeapFree LocalFree LeaveCriticalSection EnterCriticalSection GetProcessHeap GetStdHandle GetStartupInfoW IsDebuggerPresent FindClose ReadFile RaiseException SetEvent FormatMessageW GetFileType GetModuleHandleA InitializeCriticalSection FlushFileBuffers CreateEventW LoadLibraryW GetCPInfo GetFileAttributesW GetModuleFileNameA InitializeCriticalSectionAndSpinCount GetOEMCP GetEnvironmentStringsW SetStdHandle FreeEnvironmentStringsW FindFirstFileW DeleteFileW GetConsoleCP ResetEvent GetVersionExW ReleaseMutex CreateFileA EncodePointer VirtualFree GetModuleHandleExW GetFullPathNameW LoadResource UnmapViewOfFile GetExitCodeProcess ExpandEnvironmentStringsW CreateProcessW

user32

TranslateMessage LoadStringW DispatchMessageW ShowWindow DefWindowProcW MessageBoxW PostQuitMessage GetDlgItem GetSystemMetrics GetDC GetWindowRect SendMessageW SetWindowPos EnableWindow IsWindow LoadCursorW GetParent EndDialog SetWindowTextW SetTimer EndPaint BeginPaint InvalidateRect RegisterClassW EnableMenuItem GetWindow UpdateWindow GetKeyState MessageBoxA CharUpperW

Sharing

General

Malware Config

Signatures

File Explorer

2026-08-01_5bf1a4c8db4dede9d524b4689dbe1162_amadey_elex_glassworm_luca-stealer_njrat_smoke-loader

kernel32

user32

generic