2026-08-16_9edb0184fdc07199e3bd3d1cdb81f1fe_amadey_elex_glassworm_luca-stealer_njrat_smoke-loader

General

Target
2026-08-16_9edb0184fdc07199e3bd3d1cdb81f1fe_amadey_elex_glassworm_luca-stealer_njrat_smoke-loader
Size 4.0MB
Sample260816-zefejaak21
SHA256 f322d7032e3549d66d14c2dcee717d172a78e56f8cd3046bc4f9ea7a3825249b
MD5 9edb0184fdc07199e3bd3d1cdb81f1fe
SHA1 226f3208cf686e67a023f27fa3a38387e0769e79
SHA512 ad6eff8861dc53b5ffd0326fb1fc788d1d48f92a378d5b877141c933ec1b61177971122be5d663c0357db4443895a5ad253d6484d1491cabbdd4c4d72824aa46
SSDEEP 49152:aWaTIqGhMeaDOegyqu3MJA/y2AiEP0OXFz9wvJpGVb:haTIvhMeaiego3MJA/y2CPVrwvJpG
TLSH
T15D16AC71664057E2F0A133779AA7F67A392AD930D32449FB62703CA897200D7F72BD46
MD5 SHA1 SHA512 SSDEEP TLSH

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
2026-08-16_9edb0184fdc07199e3bd3d1cdb81f1fe_amadey_elex_glassworm_luca-stealer_njrat_smoke-loader

File Explorer

2026-08-16_9edb0184fdc07199e3bd3d1cdb81f1fe_amadey_elex_glassworm_luca-stealer_njrat_smoke-loader

.exe 4.0MB

2026-08-16_9edb0184fdc07199e3bd3d1cdb81f1fe_amadey_elex_glassworm_luca-stealer_njrat_smoke-loader

IMPHASH f2a25364ef6adfa33c781bc3b8087b32
SHA256 f322d7032e3549d66d14c2dcee717d172a78e56f8cd3046bc4f9ea7a3825249b
MD5 9edb0184fdc07199e3bd3d1cdb81f1fe
SHA1 226f3208cf686e67a023f27fa3a38387e0769e79
SHA512 ad6eff8861dc53b5ffd0326fb1fc788d1d48f92a378d5b877141c933ec1b61177971122be5d663c0357db4443895a5ad253d6484d1491cabbdd4c4d72824aa46
SSDEEP 49152:aWaTIqGhMeaDOegyqu3MJA/y2AiEP0OXFz9wvJpGVb:haTIvhMeaiego3MJA/y2CPVrwvJpG
TLSH
T15D16AC71664057E2F0A133779AA7F67A392AD930D32449FB62703CA897200D7F72BD46
MD5 SHA1 SHA512 SSDEEP TLSH

windows:4 windows x86 arch:x86

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

0

Major OS version

4

Entry point

3557533

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LINE_NUMS_STRIPPED IMAGE_FILE_32BIT_MACHINE

PDB paths

kernel32

GetCurrentThreadId GetCurrentProcessId GetSystemTimeAsFileTime SetUnhandledExceptionFilter GetModuleHandleW GetProcAddress CloseHandle TerminateProcess Sleep GetTickCount MultiByteToWideChar SetLastError HeapFree HeapAlloc EnterCriticalSection CreateFileW ExitProcess GetModuleFileNameW GetStartupInfoW GetCommandLineW FindClose ReadFile RaiseException GetFileType TlsGetValue GetModuleHandleA InitializeCriticalSection HeapReAlloc HeapSize LoadLibraryExW GetCPInfo SetFilePointer GetFileAttributesW InitializeCriticalSectionAndSpinCount GetOEMCP GetEnvironmentStringsW FreeEnvironmentStringsW FindNextFileW FindFirstFileW LocalAlloc DecodePointer ResetEvent GetVersionExW ReleaseMutex CreateFileA GetFileSize EncodePointer LoadLibraryA GetModuleHandleExW GetLocaleInfoW CreateDirectoryW LoadResource UnmapViewOfFile CreateProcessW

user32

TranslateMessage DispatchMessageW DestroyWindow ReleaseDC DefWindowProcW MessageBoxW PostQuitMessage CreateWindowExW GetDlgItem GetSystemMetrics GetDC GetWindowRect PostMessageW SendMessageW GetClientRect SetWindowPos EnableWindow EndDialog SetTimer LoadIconW SetFocus SetForegroundWindow GetSysColor PeekMessageW EndPaint BeginPaint ScreenToClient SetCursor KillTimer InvalidateRect RegisterClassW GetWindow UpdateWindow SystemParametersInfoW ClientToScreen

Sharing

General

Malware Config

Signatures

File Explorer

2026-08-16_9edb0184fdc07199e3bd3d1cdb81f1fe_amadey_elex_glassworm_luca-stealer_njrat_smoke-loader

kernel32

user32

generic