2026-08-17_2a76359a4889b7c6fbfbefb7a85ced5d_amadey_elex_glassworm_luca-stealer_njrat_smoke-loader

General

Target
2026-08-17_2a76359a4889b7c6fbfbefb7a85ced5d_amadey_elex_glassworm_luca-stealer_njrat_smoke-loader
Size 4.0MB
Sample260817-2kfnlaap21
SHA256 f64b5fe6548303c4af45ccc642a527a8124a07047ab1c9c445bd7c5d30b8f25c
MD5 2a76359a4889b7c6fbfbefb7a85ced5d
SHA1 f195d584ebfe21e34f5c9b92b47266f722f5511d
SHA512 01793b4336670dc423b897d41230f4132f1e0c4aad2b57fa4ccfd559e7658c1db932c741fb3cd4c205c6ba3fa88501b8c3e371f1d99246da9ad0070646941ccc
SSDEEP 49152:9BrDBcofqoP3AUcyG1N+NMd1/0OXFz9wvJpGVb:9zliy3ANJcunVrwvJpG
TLSH
T1A516CE21B97C8326E5830C75B0E9C763296F592B8B2B8CFF56B21C6556504E22233F77
MD5 SHA1 SHA512 SSDEEP TLSH

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
2026-08-17_2a76359a4889b7c6fbfbefb7a85ced5d_amadey_elex_glassworm_luca-stealer_njrat_smoke-loader

File Explorer

2026-08-17_2a76359a4889b7c6fbfbefb7a85ced5d_amadey_elex_glassworm_luca-stealer_njrat_smoke-loader

.exe 4.0MB

2026-08-17_2a76359a4889b7c6fbfbefb7a85ced5d_amadey_elex_glassworm_luca-stealer_njrat_smoke-loader

IMPHASH 35a1b052d23f8faeef3be460784c08a6
SHA256 f64b5fe6548303c4af45ccc642a527a8124a07047ab1c9c445bd7c5d30b8f25c
MD5 2a76359a4889b7c6fbfbefb7a85ced5d
SHA1 f195d584ebfe21e34f5c9b92b47266f722f5511d
SHA512 01793b4336670dc423b897d41230f4132f1e0c4aad2b57fa4ccfd559e7658c1db932c741fb3cd4c205c6ba3fa88501b8c3e371f1d99246da9ad0070646941ccc
SSDEEP 49152:9BrDBcofqoP3AUcyG1N+NMd1/0OXFz9wvJpGVb:9zliy3ANJcunVrwvJpG
TLSH
T1A516CE21B97C8326E5830C75B0E9C763296F592B8B2B8CFF56B21C6556504E22233F77
MD5 SHA1 SHA512 SSDEEP TLSH

windows:4 windows x86 arch:x86

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

0

Major OS version

4

Entry point

10625

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LINE_NUMS_STRIPPED IMAGE_FILE_32BIT_MACHINE

PDB paths

kernel32

GetCurrentProcessId SetUnhandledExceptionFilter GetModuleHandleW QueryPerformanceCounter TerminateProcess UnhandledExceptionFilter GetTickCount FreeLibrary MultiByteToWideChar WideCharToMultiByte SetLastError HeapAlloc DeleteCriticalSection WriteFile GetProcessHeap CreateFileW ExitProcess GetModuleFileNameW GetStartupInfoW GetCommandLineW FindClose ReadFile RaiseException GetModuleHandleA InitializeCriticalSection HeapReAlloc GetConsoleMode FlushFileBuffers CreateEventW HeapSetInformation WriteConsoleW SetFilePointer GetFileAttributesW CompareStringW GetModuleFileNameA InitializeCriticalSectionAndSpinCount FreeEnvironmentStringsW IsProcessorFeaturePresent FindNextFileW GetCommandLineA SetEndOfFile ResetEvent GetVersionExW ReleaseMutex OutputDebugStringW GetFileSize lstrlenW LoadLibraryA GetModuleHandleExW GetFullPathNameW LoadResource UnmapViewOfFile

user32

TranslateMessage LoadStringW ShowWindow MessageBoxW CreateWindowExW GetWindowLongW GetDlgItem GetSystemMetrics PostMessageW SetWindowPos IsWindow LoadCursorW SetWindowTextW SetTimer SetFocus PeekMessageW EndPaint InvalidateRect RegisterClassW EnableMenuItem UpdateWindow SystemParametersInfoW CharUpperW ClientToScreen

Sharing

General

Malware Config

Signatures

File Explorer

2026-08-17_2a76359a4889b7c6fbfbefb7a85ced5d_amadey_elex_glassworm_luca-stealer_njrat_smoke-loader

kernel32

user32

generic