2026-08-03_0c4709d8ebd53198b0b74ebd33b1479e_amadey_elex_glassworm_luca-stealer_njrat_smoke-loader

General

Target
2026-08-03_0c4709d8ebd53198b0b74ebd33b1479e_amadey_elex_glassworm_luca-stealer_njrat_smoke-loader
Size 4.0MB
Sample260804-d2p2lavth1
SHA256 bf222e7fc9af6beb8e466376d5da0ad2448854edbefbafb2542c65c90107f4e4
MD5 0c4709d8ebd53198b0b74ebd33b1479e
SHA1 14dd7b8263e96c7e7ae46cc269b8f68333fe7e2c
SHA512 3b37662c3608222560d2d70393dea7a0b7abe26166115d11f6e421e719bca445e785f1d97651822c32a0fd85b06a75c0b9dcb679b02e946866cf19463e0ccd3b
SSDEEP 98304:0VrwvJpGxrZCzOD/+intDGCNiyFF4Lkt4CRLKL9:0nrZCzOD/bD3tFaLktbEL
TLSH
T1311612B3FC509072F6E70C3DA16587764A3E64311315A0F75ACD11AD9BE88EEA239E07
MD5 SHA1 SHA512 SSDEEP TLSH

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
2026-08-03_0c4709d8ebd53198b0b74ebd33b1479e_amadey_elex_glassworm_luca-stealer_njrat_smoke-loader

File Explorer

2026-08-03_0c4709d8ebd53198b0b74ebd33b1479e_amadey_elex_glassworm_luca-stealer_njrat_smoke-loader

.exe 4.0MB

2026-08-03_0c4709d8ebd53198b0b74ebd33b1479e_amadey_elex_glassworm_luca-stealer_njrat_smoke-loader

IMPHASH d813c8762743fac9814ee758f07bc145
SHA256 bf222e7fc9af6beb8e466376d5da0ad2448854edbefbafb2542c65c90107f4e4
MD5 0c4709d8ebd53198b0b74ebd33b1479e
SHA1 14dd7b8263e96c7e7ae46cc269b8f68333fe7e2c
SHA512 3b37662c3608222560d2d70393dea7a0b7abe26166115d11f6e421e719bca445e785f1d97651822c32a0fd85b06a75c0b9dcb679b02e946866cf19463e0ccd3b
SSDEEP 98304:0VrwvJpGxrZCzOD/+intDGCNiyFF4Lkt4CRLKL9:0nrZCzOD/bD3tFaLktbEL
TLSH
T1311612B3FC509072F6E70C3DA16587764A3E64311315A0F75ACD11AD9BE88EEA239E07
MD5 SHA1 SHA512 SSDEEP TLSH

windows:4 windows x86 arch:x86

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

0

Major OS version

4

Entry point

4183263

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LINE_NUMS_STRIPPED IMAGE_FILE_32BIT_MACHINE

PDB paths

kernel32

GetCurrentThreadId GetCurrentProcess GetSystemTimeAsFileTime SetUnhandledExceptionFilter GetProcAddress CloseHandle TerminateProcess UnhandledExceptionFilter Sleep GetTickCount FreeLibrary MultiByteToWideChar WideCharToMultiByte HeapAlloc LocalFree LeaveCriticalSection WaitForSingleObject GetProcessHeap CreateFileW GetModuleFileNameW GetStartupInfoW GetCommandLineW SetEvent TlsGetValue GetModuleHandleA InitializeCriticalSection GetConsoleMode TlsSetValue CreateEventW HeapSetInformation HeapSize LoadLibraryW TlsFree SetFilePointer GetFileAttributesW CompareStringW GetStringTypeW LCMapStringW GetModuleFileNameA InitializeCriticalSectionAndSpinCount FreeEnvironmentStringsW FindNextFileW FindFirstFileW VirtualAlloc GetConsoleCP LocalAlloc GetCommandLineA DecodePointer GetVersionExW VirtualFree GetModuleHandleExW CreateProcessW

user32

TranslateMessage LoadStringW DispatchMessageW ShowWindow MessageBoxW SetWindowLongW GetWindowLongW GetDlgItem GetDC SendMessageW SetWindowPos IsWindow LoadCursorW EndDialog SetWindowTextW SetForegroundWindow GetSysColor SetCursor KillTimer InvalidateRect RegisterClassW GetWindowTextW UpdateWindow SystemParametersInfoW GetKeyState MessageBoxA CharUpperW

Sharing

General

Malware Config

Signatures

File Explorer

2026-08-03_0c4709d8ebd53198b0b74ebd33b1479e_amadey_elex_glassworm_luca-stealer_njrat_smoke-loader

kernel32

user32

generic