2026-08-04_81e99d842f4e89f4b433260c67939649_amadey_elex_glassworm_luca-stealer_lynx_njrat_smoke-loader

Sharing

Copy URL Twitter E-mail

General

Target
2026-08-04_81e99d842f4e89f4b433260c67939649_amadey_elex_glassworm_luca-stealer_lynx_njrat_smoke-loader
Size 1.9MB
Sample260804-hcfh3staqa
SHA256 1b053f84fff3b49aff6f54305b3f28a03e8d2c3adc0ec94dae13eddc9cb22261
MD5 81e99d842f4e89f4b433260c67939649
SHA1 6fe4bb251084e4d56516f21ff7e8f5f5c71604af
SHA512 dd233cbe64c93cf777e4a2090377f0c640767558c8fef0051d7b214852f52a91d5ee761e220d4ae796ec94232ae4cb75b3a86191c01f762d0db8c7c0b43845e3
SSDEEP 49152:w8Rm28xdSuL9RiewAbeMUg2IUb5+Pl6bJTIZ5jdgp:w8d8xkuLPiev/Ug2ICslgJTIZ5Bgp
TLSH
T12795D001F444F022D8DE9C30BABB8A7E28297D20172547FF5B9038675FB07D96939E5A
MD5 SHA1 SHA512 SSDEEP TLSH

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
2026-08-04_81e99d842f4e89f4b433260c67939649_amadey_elex_glassworm_luca-stealer_lynx_njrat_smoke-loader

File Explorer

2026-08-04_81e99d842f4e89f4b433260c67939649_amadey_elex_glassworm_luca-stealer_lynx_njrat_smoke-loader

.exe 1.9MB

2026-08-04_81e99d842f4e89f4b433260c67939649_amadey_elex_glassworm_luca-stealer_lynx_njrat_smoke-loader

IMPHASH 0cf133d901e551bcefa0595dfc8a47e4
SHA256 1b053f84fff3b49aff6f54305b3f28a03e8d2c3adc0ec94dae13eddc9cb22261
MD5 81e99d842f4e89f4b433260c67939649
SHA1 6fe4bb251084e4d56516f21ff7e8f5f5c71604af
SHA512 dd233cbe64c93cf777e4a2090377f0c640767558c8fef0051d7b214852f52a91d5ee761e220d4ae796ec94232ae4cb75b3a86191c01f762d0db8c7c0b43845e3
SSDEEP 49152:w8Rm28xdSuL9RiewAbeMUg2IUb5+Pl6bJTIZ5jdgp:w8d8xkuLPiev/Ug2ICslgJTIZ5Bgp
TLSH
T12795D001F444F022D8DE9C30BABB8A7E28297D20172547FF5B9038675FB07D96939E5A
MD5 SHA1 SHA512 SSDEEP TLSH

windows:5 windows x86 arch:x86

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

Major OS version

Entry point

1114638

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths

Name

.text

Size

446KB

Virtual Size

446KB

Characteristics

IMAGE_SCN_CNT_CODE IMAGE_SCN_MEM_EXECUTE IMAGE_SCN_MEM_READ

Name

.rdata

Size

80KB

Virtual Size

80KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.data

Size

3KB

Virtual Size

16KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.be0

Size

480KB

Virtual Size

479KB

Characteristics

IMAGE_SCN_CNT_CODE IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_EXECUTE IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.be1

Size

88KB

Virtual Size

87KB

Characteristics

IMAGE_SCN_CNT_CODE IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_EXECUTE IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.reloc

Size

17KB

Virtual Size

16KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.rsrc

Size

880KB

Virtual Size

884KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_EXECUTE IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

2026-08-04_81e99d842f4e89f4b433260c67939649_amadey_elex_glassworm_luca-stealer_lynx_njrat_smoke-loader

ws2_32

crypt32

kernel32

user32

advapi32

shell32

ntdll

bcrypt

generic