2026-08-08_30021bd7701bf4b3e8d30ddaf9678788_amadey_elex_glassworm_luca-stealer_njrat_smoke-loader

General

Target
2026-08-08_30021bd7701bf4b3e8d30ddaf9678788_amadey_elex_glassworm_luca-stealer_njrat_smoke-loader
Size 4.0MB
Sample260808-n39shawejc
SHA256 f3b9774ba8c04ff2e93324475ecf505fca8388f7f4bf3f06ad97d13d36764292
MD5 30021bd7701bf4b3e8d30ddaf9678788
SHA1 6368b49cb62dd6913aed1f8e18251bebe973a798
SHA512 f1253f87c1530c669ec70809549fcdfca2796ded8367cee85b6205392483101611d8e2547cbf0b9e16202a1e0380a403a05940350970ec08beea2734978c87a0
SSDEEP 49152:u0OXFz9wvJpGVb5I8t1c5JWFt92R6UdIRoI5z:uVrwvJpGHIgDFORlI6I5z
TLSH
T13116CF2DA474F221D0DE017DABA58BB52B6815305329E0CF569019BDFF708D3BE336A6
MD5 SHA1 SHA512 SSDEEP TLSH

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
2026-08-08_30021bd7701bf4b3e8d30ddaf9678788_amadey_elex_glassworm_luca-stealer_njrat_smoke-loader

File Explorer

2026-08-08_30021bd7701bf4b3e8d30ddaf9678788_amadey_elex_glassworm_luca-stealer_njrat_smoke-loader

.exe 4.0MB

2026-08-08_30021bd7701bf4b3e8d30ddaf9678788_amadey_elex_glassworm_luca-stealer_njrat_smoke-loader

IMPHASH 31ce550834d2da5c4d378ac353bf35e3
SHA256 f3b9774ba8c04ff2e93324475ecf505fca8388f7f4bf3f06ad97d13d36764292
MD5 30021bd7701bf4b3e8d30ddaf9678788
SHA1 6368b49cb62dd6913aed1f8e18251bebe973a798
SHA512 f1253f87c1530c669ec70809549fcdfca2796ded8367cee85b6205392483101611d8e2547cbf0b9e16202a1e0380a403a05940350970ec08beea2734978c87a0
SSDEEP 49152:u0OXFz9wvJpGVb5I8t1c5JWFt92R6UdIRoI5z:uVrwvJpGHIgDFORlI6I5z
TLSH
T13116CF2DA474F221D0DE017DABA58BB52B6815305329E0CF569019BDFF708D3BE336A6
MD5 SHA1 SHA512 SSDEEP TLSH

windows:4 windows x86 arch:x86

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

0

Major OS version

4

Entry point

630992

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LINE_NUMS_STRIPPED IMAGE_FILE_32BIT_MACHINE

PDB paths

kernel32

GetCurrentThreadId GetCurrentProcess GetSystemTimeAsFileTime SetUnhandledExceptionFilter GetModuleHandleW QueryPerformanceCounter Sleep MultiByteToWideChar WideCharToMultiByte HeapFree LocalFree DeleteCriticalSection LeaveCriticalSection EnterCriticalSection WriteFile WaitForSingleObject GetProcessHeap CreateFileW ExitProcess GetStdHandle IsDebuggerPresent ReadFile RaiseException SetEvent FormatMessageW GetModuleHandleA InitializeCriticalSection TlsSetValue CreateEventW TlsAlloc HeapSize LoadLibraryW LoadLibraryExW CreateThread CompareStringW GetStringTypeW LCMapStringW InitializeCriticalSectionAndSpinCount FreeEnvironmentStringsW IsProcessorFeaturePresent FindNextFileW FindFirstFileW VirtualAlloc LocalAlloc SetEndOfFile ResetEvent GetVersionExW ReleaseMutex CreateFileA OutputDebugStringW EncodePointer GetModuleHandleExW CreateDirectoryW GetFullPathNameW LoadResource UnmapViewOfFile GetExitCodeProcess ExpandEnvironmentStringsW CreateProcessW

user32

ReleaseDC DefWindowProcW CreateWindowExW SetWindowLongW GetDlgItem GetWindowRect PostMessageW SendMessageW EnableWindow IsWindow GetParent EndDialog SetWindowTextW SetTimer LoadIconW SetFocus SetForegroundWindow EndPaint BeginPaint GetWindow GetWindowTextW UpdateWindow SystemParametersInfoW GetKeyState MessageBoxA CharUpperW ClientToScreen

Sharing

General

Malware Config

Signatures

File Explorer

2026-08-08_30021bd7701bf4b3e8d30ddaf9678788_amadey_elex_glassworm_luca-stealer_njrat_smoke-loader

kernel32

user32

generic