2026-08-15_e9ca29997551e02e6dbd2f1811ee294f_amadey_elex_glassworm_luca-stealer_njrat_smoke-loader

General

Target
2026-08-15_e9ca29997551e02e6dbd2f1811ee294f_amadey_elex_glassworm_luca-stealer_njrat_smoke-loader
Size 4.0MB
Sample260815-v1bagsem4x
SHA256 d0061ab743ed70c91ee10fc55e64f869ebeca944d781b12d663b7ecd7c4c5c4b
MD5 e9ca29997551e02e6dbd2f1811ee294f
SHA1 42f13e5e871b806e6c1cf03c40eca199be309305
SHA512 4a535c32971dd9e79c142603afa83c152c2f976b33f3d3b701fb8823600a9bb3feef9f68e609a79899ce5d9e501d16cc832cd4f62ad39bc769cc769214bfca60
SSDEEP 98304:fVrwvJpGsN9L6wFGBM3m+S71pCUE0MmzEfLugLXyMIxyk:f6N90MV41pKQc1Ra
TLSH
T169161261B881E0AEE1EB1B38F574C6B78E3E9920772D80F777AC455572A00C2763F646
MD5 SHA1 SHA512 SSDEEP TLSH

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
2026-08-15_e9ca29997551e02e6dbd2f1811ee294f_amadey_elex_glassworm_luca-stealer_njrat_smoke-loader

File Explorer

2026-08-15_e9ca29997551e02e6dbd2f1811ee294f_amadey_elex_glassworm_luca-stealer_njrat_smoke-loader

.exe 4.0MB

2026-08-15_e9ca29997551e02e6dbd2f1811ee294f_amadey_elex_glassworm_luca-stealer_njrat_smoke-loader

IMPHASH 5f2c6cf1db5ba9d2492aabc3179ecbbd
SHA256 d0061ab743ed70c91ee10fc55e64f869ebeca944d781b12d663b7ecd7c4c5c4b
MD5 e9ca29997551e02e6dbd2f1811ee294f
SHA1 42f13e5e871b806e6c1cf03c40eca199be309305
SHA512 4a535c32971dd9e79c142603afa83c152c2f976b33f3d3b701fb8823600a9bb3feef9f68e609a79899ce5d9e501d16cc832cd4f62ad39bc769cc769214bfca60
SSDEEP 98304:fVrwvJpGsN9L6wFGBM3m+S71pCUE0MmzEfLugLXyMIxyk:f6N90MV41pKQc1Ra
TLSH
T169161261B881E0AEE1EB1B38F574C6B78E3E9920772D80F777AC455572A00C2763F646
MD5 SHA1 SHA512 SSDEEP TLSH

windows:4 windows x86 arch:x86

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

0

Major OS version

4

Entry point

635633

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LINE_NUMS_STRIPPED IMAGE_FILE_32BIT_MACHINE

PDB paths

kernel32

GetLastError SetUnhandledExceptionFilter GetProcAddress Sleep MultiByteToWideChar SetLastError HeapFree HeapAlloc LocalFree LeaveCriticalSection WriteFile WaitForSingleObject GetProcessHeap CreateFileW GetModuleFileNameW GetStdHandle RaiseException SetEvent GetACP FormatMessageW GetFileType TlsGetValue GetModuleHandleA InitializeCriticalSection FlushFileBuffers TlsSetValue CreateEventW TlsAlloc LoadLibraryW LoadLibraryExW GetCPInfo CompareStringW InitializeCriticalSectionAndSpinCount GetEnvironmentStringsW SetStdHandle FreeEnvironmentStringsW IsProcessorFeaturePresent FindNextFileW FindFirstFileW DeleteFileW VirtualAlloc GetConsoleCP LocalAlloc SetEndOfFile GetVersionExW ReleaseMutex CreateFileA OutputDebugStringW GetFileSize EncodePointer VirtualFree GetModuleHandleExW CreateDirectoryW LoadResource UnmapViewOfFile GetExitCodeProcess ExpandEnvironmentStringsW CreateProcessW

user32

TranslateMessage LoadStringW ShowWindow DefWindowProcW MessageBoxW PostQuitMessage CreateWindowExW GetWindowLongW GetMessageW GetWindowRect PostMessageW SendMessageW GetClientRect EnableWindow IsWindow GetParent EndDialog SetTimer LoadIconW SetFocus PeekMessageW BeginPaint GetWindow UpdateWindow MessageBoxA

Sharing

General

Malware Config

Signatures

File Explorer

2026-08-15_e9ca29997551e02e6dbd2f1811ee294f_amadey_elex_glassworm_luca-stealer_njrat_smoke-loader

kernel32

user32

generic