2026-08-20_9abb8ee3cc52a0b9887901f1cb939dfa_amadey_elex_glassworm_luca-stealer_lynx_njrat_smoke-loader

General

Target
2026-08-20_9abb8ee3cc52a0b9887901f1cb939dfa_amadey_elex_glassworm_luca-stealer_lynx_njrat_smoke-loader
Size 1.6MB
Sample260821-c66dpshc46
SHA256 98c458d1d2eb3e92dc41478ae46a9e3ab045aa5821042ec582aaa84561dd8d8b
MD5 9abb8ee3cc52a0b9887901f1cb939dfa
SHA1 7cf55f5ef7fa565540eeeff3c7ff3377768cc9e0
SHA512 da0b9cfc5abdf6be04ff1077a4b7dfae02d64c7e0f0dbe6558a3dd9c27298d3319aa712ac143fe6370a778e354d863d2bf426cd06bd5b073d2bd83569ce71ee6
SSDEEP 49152:bCBlKsrRDf8rGc8oIdg+9ZdE0uv2VKoKplfS+NtNTJe3nW2wNfEL9:bzsrRDf8rGc8oIdg+9ZdESK2F3nH
TLSH
T1C5758D32B010C136F59342F1CDBCAFAE62BCAB214B6518CB53D84A6E59754D33B32667
MD5 SHA1 SHA512 SSDEEP TLSH

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
2026-08-20_9abb8ee3cc52a0b9887901f1cb939dfa_amadey_elex_glassworm_luca-stealer_lynx_njrat_smoke-loader

File Explorer

2026-08-20_9abb8ee3cc52a0b9887901f1cb939dfa_amadey_elex_glassworm_luca-stealer_lynx_njrat_smoke-loader

.exe 1.6MB

2026-08-20_9abb8ee3cc52a0b9887901f1cb939dfa_amadey_elex_glassworm_luca-stealer_lynx_njrat_smoke-loader

IMPHASH f60082f02697aa4de2c1463a16719593
SHA256 98c458d1d2eb3e92dc41478ae46a9e3ab045aa5821042ec582aaa84561dd8d8b
MD5 9abb8ee3cc52a0b9887901f1cb939dfa
SHA1 7cf55f5ef7fa565540eeeff3c7ff3377768cc9e0
SHA512 da0b9cfc5abdf6be04ff1077a4b7dfae02d64c7e0f0dbe6558a3dd9c27298d3319aa712ac143fe6370a778e354d863d2bf426cd06bd5b073d2bd83569ce71ee6
SSDEEP 49152:bCBlKsrRDf8rGc8oIdg+9ZdE0uv2VKoKplfS+NtNTJe3nW2wNfEL9:bzsrRDf8rGc8oIdg+9ZdESK2F3nH
TLSH
T1C5758D32B010C136F59342F1CDBCAFAE62BCAB214B6518CB53D84A6E59754D33B32667
MD5 SHA1 SHA512 SSDEEP TLSH

windows:6 windows x86 arch:x86

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

0

Major OS version

6

Entry point

1134418

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_CUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths

dbghelp

SymFromAddr

kernel32

FindClose FindNextFileW GetLastError SetLastError MultiByteToWideChar WideCharToMultiByte OutputDebugStringA InitializeSRWLock ReleaseSRWLockExclusive AcquireSRWLockExclusive InitializeConditionVariable WakeConditionVariable SleepConditionVariableSRW RtlCaptureStackBackTrace GetCurrentProcess GetSystemInfo VirtualAlloc Sleep GetProcAddress LoadLibraryExW GetCurrentThreadId GetLogicalProcessorInformation GetStringTypeW CloseHandle SwitchToThread QueryPerformanceCounter QueryPerformanceFrequency EnterCriticalSection LeaveCriticalSection GetEnvironmentStringsW DeleteCriticalSection EncodePointer DecodePointer LCMapStringEx WakeAllConditionVariable GetSystemTimeAsFileTime GetModuleHandleW GetCPInfo InitializeSListHead UnhandledExceptionFilter SetUnhandledExceptionFilter TerminateProcess HeapSize IsDebuggerPresent GetStartupInfoW GetCurrentProcessId GetOEMCP FreeEnvironmentStringsW GetProcessHeap InitializeCriticalSectionEx IsProcessorFeaturePresent RaiseException RtlUnwind InitializeCriticalSectionAndSpinCount TlsAlloc TlsGetValue TlsSetValue TlsFree FreeLibrary GetStdHandle GetFileType GetModuleFileNameW GetModuleHandleExW WriteConsoleW SetEnvironmentVariableW CreateFileW ReadFile GetConsoleMode ReadConsoleW WriteFile GetConsoleOutputCP ExitProcess GetCommandLineA GetCommandLineW HeapAlloc HeapFree OutputDebugStringW CompareStringW LCMapStringW GetLocaleInfoW IsValidLocale GetUserDefaultLCID EnumSystemLocalesW SetStdHandle SetFilePointerEx FlushFileBuffers GetFileSizeEx HeapReAlloc FindFirstFileExW IsValidCodePage GetACP

Sharing

General

Malware Config

Signatures

File Explorer

2026-08-20_9abb8ee3cc52a0b9887901f1cb939dfa_amadey_elex_glassworm_luca-stealer_lynx_njrat_smoke-loader

dbghelp

kernel32

generic