2026-08-17_49935eaec75358c85352fb4adff1eaa9_elex_glassworm_luca-stealer_njrat_nymaim_remcos_rhadamanthys_smoke-loader

General

Target
2026-08-17_49935eaec75358c85352fb4adff1eaa9_elex_glassworm_luca-stealer_njrat_nymaim_remcos_rhadamanthys_smoke-loader
Size 4.9MB
Sample260817-x49cssgm8w
SHA256 be4aa901d7ec2bf5271d136c569ccabfcac36e401368cd22582a045545ff468e
MD5 49935eaec75358c85352fb4adff1eaa9
SHA1 d87a63e3382089ba44abc882f99bf904404fead8
SHA512 37733dea12f87152f224b4ae209e0c1fd53ff6984231f8ab4b8893f94084eeda8ad0209affc41e883a73e9aef6fc74c5c8f0d3354dec42df37bb153d407e9dfc
SSDEEP 49152:HyCFJbxj2/QGxSftT0MjL/gxkOjc9210qps/7UEK8mCBIRc0i+CbRquA/m2yL5z2:HyC8xQeMjLsAAa/7JNzJzoq2Vjnmm
TLSH
T1F136CF097AB8C1B1C1FFC77841A28646F7B174059B31ABEF466546AD2E33BD05E3E221
MD5 SHA1 SHA512 SSDEEP TLSH

Score

3^/10

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
2026-08-17_49935eaec75358c85352fb4adff1eaa9_elex_glassworm_luca-stealer_njrat_nymaim_remcos_rhadamanthys_smoke-loader

2026-08-17_49935eaec75358c85352fb4adff1eaa9_elex_glassworm_luca-stealer_njrat_nymaim_remcos_rhadamanthys_smoke-loader

.exe 4.9MB

IMPHASH c2fd457479c35373b86c567e67557295
SHA256 be4aa901d7ec2bf5271d136c569ccabfcac36e401368cd22582a045545ff468e
MD5 49935eaec75358c85352fb4adff1eaa9
SHA1 d87a63e3382089ba44abc882f99bf904404fead8
SHA512 37733dea12f87152f224b4ae209e0c1fd53ff6984231f8ab4b8893f94084eeda8ad0209affc41e883a73e9aef6fc74c5c8f0d3354dec42df37bb153d407e9dfc
SSDEEP 49152:HyCFJbxj2/QGxSftT0MjL/gxkOjc9210qps/7UEK8mCBIRc0i+CbRquA/m2yL5z2:HyC8xQeMjLsAAa/7JNzJzoq2Vjnmm
TLSH
T1F136CF097AB8C1B1C1FFC77841A28646F7B174059B31ABEF466546AD2E33BD05E3E221
MD5 SHA1 SHA512 SSDEEP TLSH

Minor OS version

0

Major OS version

4

Entry point

13019

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LINE_NUMS_STRIPPED IMAGE_FILE_LOCAL_SYMS_STRIPPED IMAGE_FILE_32BIT_MACHINE

PDB paths