2026-08-22_ac265ce3832005f1f9486d415bb32ec7_amadey_elex_glassworm_luca-stealer_njrat_smoke-loader

General

Target
2026-08-22_ac265ce3832005f1f9486d415bb32ec7_amadey_elex_glassworm_luca-stealer_njrat_smoke-loader
Size 4.0MB
Sample260823-daefsawzhs
SHA256 1a6e2d889a1dddfba672e6262556bb75e79b569d5ada5f7446fc75322d969812
MD5 ac265ce3832005f1f9486d415bb32ec7
SHA1 3cc50e261be7b2b4bd8e40f03864a3613d4744d6
SHA512 14cd5ed0234eb555ae79726368d7569a43314460033ac7b469c4ed588318c9b6d693973e34cae5f52eb95152bd03a5f8169b9136b1a61d6b9e55a7a2bf1fe4ec
SSDEEP 49152:C0OXFz9wvJpGVbAfV8/sKPZktC9hE1wKyRdWdZX+UlZ6N4:CVrwvJpGk8/LPZp9hEiKiaEA6N4
TLSH
T1F416BD53EC7690F2EE9200F8DCF65E6B4E2C5E65231690DF369320ACD6D40D256FAD22
MD5 SHA1 SHA512 SSDEEP TLSH

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
2026-08-22_ac265ce3832005f1f9486d415bb32ec7_amadey_elex_glassworm_luca-stealer_njrat_smoke-loader

File Explorer

2026-08-22_ac265ce3832005f1f9486d415bb32ec7_amadey_elex_glassworm_luca-stealer_njrat_smoke-loader

.exe 4.0MB

2026-08-22_ac265ce3832005f1f9486d415bb32ec7_amadey_elex_glassworm_luca-stealer_njrat_smoke-loader

IMPHASH bf4d4c975d4382ac2772f29c8e9ce7c4
SHA256 1a6e2d889a1dddfba672e6262556bb75e79b569d5ada5f7446fc75322d969812
MD5 ac265ce3832005f1f9486d415bb32ec7
SHA1 3cc50e261be7b2b4bd8e40f03864a3613d4744d6
SHA512 14cd5ed0234eb555ae79726368d7569a43314460033ac7b469c4ed588318c9b6d693973e34cae5f52eb95152bd03a5f8169b9136b1a61d6b9e55a7a2bf1fe4ec
SSDEEP 49152:C0OXFz9wvJpGVbAfV8/sKPZktC9hE1wKyRdWdZX+UlZ6N4:CVrwvJpGk8/LPZp9hEiKiaEA6N4
TLSH
T1F416BD53EC7690F2EE9200F8DCF65E6B4E2C5E65231690DF369320ACD6D40D256FAD22
MD5 SHA1 SHA512 SSDEEP TLSH

windows:4 windows x86 arch:x86

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

0

Major OS version

4

Entry point

4182689

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LINE_NUMS_STRIPPED IMAGE_FILE_32BIT_MACHINE

PDB paths

kernel32

GetCurrentProcess SetUnhandledExceptionFilter GetProcAddress CloseHandle UnhandledExceptionFilter GetTickCount FreeLibrary MultiByteToWideChar WideCharToMultiByte SetLastError HeapFree HeapAlloc LocalFree EnterCriticalSection WriteFile GetProcessHeap CreateFileW GetStartupInfoW GetCommandLineW FindClose FormatMessageW GetModuleHandleA GetConsoleMode TlsSetValue TlsAlloc LoadLibraryW LoadLibraryExW GetCPInfo TlsFree SetFilePointer GetModuleFileNameA GetOEMCP GetEnvironmentStringsW SetStdHandle IsProcessorFeaturePresent FindFirstFileW DeleteFileW GetConsoleCP LocalAlloc GetCommandLineA GetVersionExW ReleaseMutex CreateFileA OutputDebugStringW EncodePointer VirtualFree lstrlenW GetModuleHandleExW GetLocaleInfoW GetExitCodeProcess CreateProcessW

user32

TranslateMessage LoadStringW ShowWindow DestroyWindow GetMessageW GetSystemMetrics GetWindowRect PostMessageW SendMessageW EnableWindow LoadCursorW GetParent EndDialog SetTimer PeekMessageW EndPaint BeginPaint ScreenToClient KillTimer InvalidateRect RegisterClassW EnableMenuItem GetWindow GetWindowTextW UpdateWindow GetKeyState MessageBoxA CharUpperW ClientToScreen

Sharing

General

Malware Config

Signatures

File Explorer

2026-08-22_ac265ce3832005f1f9486d415bb32ec7_amadey_elex_glassworm_luca-stealer_njrat_smoke-loader

kernel32

user32

generic