2026-08-23_96b4b123e370bfa1ef216cc98813784b_amadey_elex_glassworm_luca-stealer_njrat_smoke-loader

General

Target
2026-08-23_96b4b123e370bfa1ef216cc98813784b_amadey_elex_glassworm_luca-stealer_njrat_smoke-loader
Size 4.0MB
Sample260824-e9s9nashpd
SHA256 96206e23e8fbb1d2b3d5861c0d2cb7f5fed4d7f212674339773dac23a6e1f80c
MD5 96b4b123e370bfa1ef216cc98813784b
SHA1 b8c05dbcf79680be40cfb0655d2b8c377b66ab86
SHA512 0f0d612039c09391cb4fa5cbab51e13b8b78a4b5827605be5964ae4f31a8ee62d0bd0678204a23a17d6f04ec9f7af80282f7ddb1bd1943188eec8c2ac174ec4e
SSDEEP 98304:Bg9OYKaPTWVO6IrdtkDm9OgasE5PYImXozMvVrwvJpG:Jm70a3YjmA4
TLSH
T1631612616483C362E1E6333DA57F4FFA2D3992356328F8FB63C05CA717A42E12671646
MD5 SHA1 SHA512 SSDEEP TLSH

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
2026-08-23_96b4b123e370bfa1ef216cc98813784b_amadey_elex_glassworm_luca-stealer_njrat_smoke-loader

File Explorer

2026-08-23_96b4b123e370bfa1ef216cc98813784b_amadey_elex_glassworm_luca-stealer_njrat_smoke-loader

.exe 4.0MB

2026-08-23_96b4b123e370bfa1ef216cc98813784b_amadey_elex_glassworm_luca-stealer_njrat_smoke-loader

IMPHASH 6e49c55cab86a0efacb9cb9cbc584916
SHA256 96206e23e8fbb1d2b3d5861c0d2cb7f5fed4d7f212674339773dac23a6e1f80c
MD5 96b4b123e370bfa1ef216cc98813784b
SHA1 b8c05dbcf79680be40cfb0655d2b8c377b66ab86
SHA512 0f0d612039c09391cb4fa5cbab51e13b8b78a4b5827605be5964ae4f31a8ee62d0bd0678204a23a17d6f04ec9f7af80282f7ddb1bd1943188eec8c2ac174ec4e
SSDEEP 98304:Bg9OYKaPTWVO6IrdtkDm9OgasE5PYImXozMvVrwvJpG:Jm70a3YjmA4
TLSH
T1631612616483C362E1E6333DA57F4FFA2D3992356328F8FB63C05CA717A42E12671646
MD5 SHA1 SHA512 SSDEEP TLSH

windows:4 windows x86 arch:x86

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

0

Major OS version

4

Entry point

9581

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LINE_NUMS_STRIPPED IMAGE_FILE_32BIT_MACHINE

PDB paths

kernel32

GetLastError GetCurrentThreadId SetUnhandledExceptionFilter TerminateProcess UnhandledExceptionFilter FreeLibrary MultiByteToWideChar SetLastError GetProcessHeap CreateFileW ExitProcess GetStdHandle GetCommandLineW FindClose ReadFile RaiseException SetEvent GetACP GetFileType GetModuleHandleA HeapReAlloc CreateEventW HeapSetInformation HeapSize WriteConsoleW GetCPInfo TlsFree SetFilePointer GetFileAttributesW GetStringTypeW LCMapStringW GetEnvironmentStringsW FindNextFileW FindFirstFileW DeleteFileW GetConsoleCP GetCommandLineA DecodePointer ResetEvent GetVersionExW CreateFileA VirtualFree GetModuleHandleExW GetLocaleInfoW CreateDirectoryW GetFullPathNameW LoadResource ExpandEnvironmentStringsW

user32

TranslateMessage LoadStringW DispatchMessageW DestroyWindow ReleaseDC DefWindowProcW CreateWindowExW GetWindowLongW GetMessageW GetSystemMetrics PostMessageW SendMessageW GetClientRect IsWindow LoadCursorW GetParent SetTimer LoadIconW SetFocus GetSysColor ScreenToClient SetCursor RegisterClassW EnableMenuItem GetWindow GetWindowTextW UpdateWindow SystemParametersInfoW MessageBoxA ClientToScreen

Sharing

General

Malware Config

Signatures

File Explorer

2026-08-23_96b4b123e370bfa1ef216cc98813784b_amadey_elex_glassworm_luca-stealer_njrat_smoke-loader

kernel32

user32

generic