General

  • Target
    2026-08-05_50e5357d7e3916e5c0e85362a15eca87_amadey_elex_glassworm_luca-stealer_lynx_njrat
  • Size 2.1MB
  • Sample260805-dmkhkace86
  • SHA256 d38500339afeffdebc5941ddc4088fb2d33357358dfe1dd19c9f1dd1e0e9f12d
  • MD5 SHA1 SHA512 SSDEEP TLSH
Score
5/10

Malware Config

Signatures

  • Codesign digest Mismatch 1 IoCs

    File was altered after it was signed.

File Explorer

  • 2026-08-05_50e5357d7e3916e5c0e85362a15eca87_amadey_elex_glassworm_luca-stealer_lynx_njrat
    .exe 2.1MB

2026-08-05_50e5357d7e3916e5c0e85362a15eca87_amadey_elex_glassworm_luca-stealer_lynx_njrat

  • IMPHASH a72fd62a3e6942864ca4c455cc2d8267
  • SHA256 d38500339afeffdebc5941ddc4088fb2d33357358dfe1dd19c9f1dd1e0e9f12d
  • MD5 SHA1 SHA512 SSDEEP TLSH
  • Codesign digest Mismatch

    File was altered after it was signed.

PE Signature issue

Digest
9a:49:3f:d2:25:af:f0:cd:f0:d5:70:2c:ea:7d:f9:3f:12:76:aa:66:2e:5b:80:80:f2:37:54:3e:b5:68:6b:f2
Digest Algorithm
sha256
PE Digests Matches
Not matched
Trusted
Signing Certificate
SERIALNUMBER=801509,CN=Scientific Forming Technologies Corporation,O=Scientific Forming Technologies Corporation,ST=Ohio,C=US,2.5.4.15=#131450726976617465204f7267616e697a6174696f6e,1.3.6.1.4.1.311.60.2.1.2=#13044f68696f,1.3.6.1.4.1.311.60.2.1.3=#13025553
Minor OS version
0
Major OS version
5
Entry point
932692
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_GUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE
PDB paths
C:\BUILD\WORKSPACE_v2\DEFORM_BUILD\relv141\Release_32\image\license\LicenseServer.pdb