2026-08-01_340e5893adf36ca48e6adcb45d2456db_amadey_elex_glassworm_luca-stealer_njrat_smoke-loader

General

Target
2026-08-01_340e5893adf36ca48e6adcb45d2456db_amadey_elex_glassworm_luca-stealer_njrat_smoke-loader
Size 4.0MB
Sample260802-bdmkfsar9z
SHA256 4adce7cac2022453a7d86cb8f159c9009462cf05558d80d2d99801a6e9b97a96
MD5 340e5893adf36ca48e6adcb45d2456db
SHA1 e09e7c44d2050b762dfbe04c6ad62b8b330fc907
SHA512 e138f0bb15b8872d1605d3513e8895fb6e58f26ae1207a6772f70e6bdbdacb0f31983ff01e61cb35a2615af66c42451ad13c15143ef7ae0ee4157a20693db704
SSDEEP 98304:ug7DzSar9tDJZth1Nruaq2ZXgd6QcNTGVrwvJpG:npZtDJHNruh2xO6hNi
TLSH
T1D4161222BC508172F2D3B23865F9BAFBDE7CD221D39A90CB77D0126652F04D26375A46
MD5 SHA1 SHA512 SSDEEP TLSH

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
2026-08-01_340e5893adf36ca48e6adcb45d2456db_amadey_elex_glassworm_luca-stealer_njrat_smoke-loader

File Explorer

2026-08-01_340e5893adf36ca48e6adcb45d2456db_amadey_elex_glassworm_luca-stealer_njrat_smoke-loader

.exe 4.0MB

2026-08-01_340e5893adf36ca48e6adcb45d2456db_amadey_elex_glassworm_luca-stealer_njrat_smoke-loader

IMPHASH 5eff5aa8862a5382cd971b30b63401c8
SHA256 4adce7cac2022453a7d86cb8f159c9009462cf05558d80d2d99801a6e9b97a96
MD5 340e5893adf36ca48e6adcb45d2456db
SHA1 e09e7c44d2050b762dfbe04c6ad62b8b330fc907
SHA512 e138f0bb15b8872d1605d3513e8895fb6e58f26ae1207a6772f70e6bdbdacb0f31983ff01e61cb35a2615af66c42451ad13c15143ef7ae0ee4157a20693db704
SSDEEP 98304:ug7DzSar9tDJZth1Nruaq2ZXgd6QcNTGVrwvJpG:npZtDJHNruh2xO6hNi
TLSH
T1D4161222BC508172F2D3B23865F9BAFBDE7CD221D39A90CB77D0126652F04D26375A46
MD5 SHA1 SHA512 SSDEEP TLSH

windows:4 windows x86 arch:x86

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

0

Major OS version

4

Entry point

4182902

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LINE_NUMS_STRIPPED IMAGE_FILE_32BIT_MACHINE

PDB paths

kernel32

GetLastError GetCurrentProcess GetCurrentProcessId GetSystemTimeAsFileTime SetUnhandledExceptionFilter GetModuleHandleW GetProcAddress CloseHandle UnhandledExceptionFilter SetLastError HeapFree HeapAlloc LocalFree DeleteCriticalSection LeaveCriticalSection EnterCriticalSection WriteFile WaitForSingleObject GetProcessHeap CreateFileW ExitProcess GetStartupInfoW GetCommandLineW RaiseException FormatMessageW GetFileType InitializeCriticalSection HeapReAlloc TlsSetValue HeapSetInformation WriteConsoleW LoadLibraryW SetFilePointer CompareStringW GetStringTypeW RtlUnwind GetModuleFileNameA InitializeCriticalSectionAndSpinCount GetOEMCP SetStdHandle FreeEnvironmentStringsW IsProcessorFeaturePresent IsValidCodePage DecodePointer GetVersionExW ReleaseMutex OutputDebugStringW GetFileSize EncodePointer VirtualFree LoadLibraryA GetLocaleInfoW GetFullPathNameW ExpandEnvironmentStringsW CreateProcessW

user32

TranslateMessage ReleaseDC MessageBoxW PostQuitMessage GetWindowLongW GetDC GetWindowRect PostMessageW SendMessageW GetClientRect IsWindow EndDialog SetWindowTextW SetTimer SetFocus ScreenToClient KillTimer InvalidateRect EnableMenuItem GetWindow GetWindowTextW UpdateWindow GetKeyState CharUpperW

Sharing

General

Malware Config

Signatures

File Explorer

2026-08-01_340e5893adf36ca48e6adcb45d2456db_amadey_elex_glassworm_luca-stealer_njrat_smoke-loader

kernel32

user32

generic