2026-08-03_4342da2dfc9e87565a5f3bc003cbb083_amadey_elex_glassworm_luca-stealer_njrat_smoke-loader

General

Target
2026-08-03_4342da2dfc9e87565a5f3bc003cbb083_amadey_elex_glassworm_luca-stealer_njrat_smoke-loader
Size 4.0MB
Sample260804-pflmtsel4y
SHA256 568a929ad829bfbc8c514101b3b4a24b011b70b97920245796269b9b8bcf2ad2
MD5 4342da2dfc9e87565a5f3bc003cbb083
SHA1 a3b39d93af976c20a8ccb6a014868ef40c7c36b7
SHA512 e4df0e9bc8dc86714ebd0d5e7216f7e37cf2d9ff1b011450d5ba2f85ca52b0cfbe9415d734417863ea86023315c74c0ae4395ed7b0f819b4957a2e68b421c563
SSDEEP 98304:bVrwvJpGgv9Oa0sogYmsVo7F82jS0QZUyCcpcOy:bqvhAGmjcO
TLSH
T1E0161239F4C191F3E282E83992F786772A381522132594EB2794C465EAECCC1F6757CB
MD5 SHA1 SHA512 SSDEEP TLSH

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
2026-08-03_4342da2dfc9e87565a5f3bc003cbb083_amadey_elex_glassworm_luca-stealer_njrat_smoke-loader

File Explorer

2026-08-03_4342da2dfc9e87565a5f3bc003cbb083_amadey_elex_glassworm_luca-stealer_njrat_smoke-loader

.exe 4.0MB

2026-08-03_4342da2dfc9e87565a5f3bc003cbb083_amadey_elex_glassworm_luca-stealer_njrat_smoke-loader

IMPHASH 32b068ea3cebb64433eecd7f8b9e9d81
SHA256 568a929ad829bfbc8c514101b3b4a24b011b70b97920245796269b9b8bcf2ad2
MD5 4342da2dfc9e87565a5f3bc003cbb083
SHA1 a3b39d93af976c20a8ccb6a014868ef40c7c36b7
SHA512 e4df0e9bc8dc86714ebd0d5e7216f7e37cf2d9ff1b011450d5ba2f85ca52b0cfbe9415d734417863ea86023315c74c0ae4395ed7b0f819b4957a2e68b421c563
SSDEEP 98304:bVrwvJpGgv9Oa0sogYmsVo7F82jS0QZUyCcpcOy:bqvhAGmjcO
TLSH
T1E0161239F4C191F3E282E83992F786772A381522132594EB2794C465EAECCC1F6757CB
MD5 SHA1 SHA512 SSDEEP TLSH

windows:4 windows x86 arch:x86

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

0

Major OS version

4

Entry point

5629

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LINE_NUMS_STRIPPED IMAGE_FILE_32BIT_MACHINE

PDB paths

kernel32

GetCurrentThreadId GetCurrentProcessId GetSystemTimeAsFileTime QueryPerformanceCounter GetProcAddress TerminateProcess UnhandledExceptionFilter Sleep FreeLibrary WideCharToMultiByte SetLastError HeapFree LeaveCriticalSection EnterCriticalSection CreateFileW GetStartupInfoW GetCommandLineW ReadFile RaiseException SetEvent GetFileType TlsGetValue GetModuleHandleA HeapReAlloc TlsAlloc HeapSetInformation HeapSize WriteConsoleW LoadLibraryW GetCPInfo SetFilePointer CompareStringW GetStringTypeW LCMapStringW GetModuleFileNameA InitializeCriticalSectionAndSpinCount GetOEMCP GetEnvironmentStringsW SetStdHandle FreeEnvironmentStringsW GetConsoleCP LocalAlloc GetCommandLineA DecodePointer ReleaseMutex CreateFileA OutputDebugStringW VirtualFree LoadLibraryA GetModuleHandleExW GetLocaleInfoW CreateDirectoryW GetFullPathNameW LoadResource UnmapViewOfFile

user32

DispatchMessageW DestroyWindow DefWindowProcW MessageBoxW PostQuitMessage SetWindowLongW GetWindowLongW GetMessageW GetDC SetWindowPos EnableWindow IsWindow LoadIconW GetSysColor PeekMessageW EndPaint BeginPaint ScreenToClient SetCursor KillTimer InvalidateRect RegisterClassW UpdateWindow SystemParametersInfoW GetKeyState CharUpperW ClientToScreen

Sharing

General

Malware Config

Signatures

File Explorer

2026-08-03_4342da2dfc9e87565a5f3bc003cbb083_amadey_elex_glassworm_luca-stealer_njrat_smoke-loader

kernel32

user32

generic