2026-09-08_a949eeae1771e830004be730adcb5956_amadey_elex_glassworm_luca-stealer_njrat_smoke-loader

General

Target
2026-09-08_a949eeae1771e830004be730adcb5956_amadey_elex_glassworm_luca-stealer_njrat_smoke-loader
Size 4.0MB
Sample260910-d5ltcawcre
SHA256 b96140207296b0ade89a7a8f4e935f767a5ed971552ffade99b09352779e93e3
MD5 a949eeae1771e830004be730adcb5956
SHA1 585671a4aabdb2a04e855e25ed5593f2c7c58bbf
SHA512 498eab9dee6f1f26e66b3f0f1982f2ddf4734567ce6f8a5e7cded1332c4a90d5f7bae2bfca742bb59391798a6252f5af8b1e5837ac5f5feb4eda2335c268be78
SSDEEP 98304:xVrwvJpGJTNZjXbRw/nNRqP1/AzxAMiTHVhbt12naEyL2:xbTNdr8nNoPB1hOnaK
TLSH
T1751612F7B741C076FAD3013DE0B547763FEC676193119AC343E056AAAA20CD2E63964A
MD5 SHA1 SHA512 SSDEEP TLSH

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
2026-09-08_a949eeae1771e830004be730adcb5956_amadey_elex_glassworm_luca-stealer_njrat_smoke-loader

File Explorer

2026-09-08_a949eeae1771e830004be730adcb5956_amadey_elex_glassworm_luca-stealer_njrat_smoke-loader

.exe 4.0MB

2026-09-08_a949eeae1771e830004be730adcb5956_amadey_elex_glassworm_luca-stealer_njrat_smoke-loader

IMPHASH 1137ca05a8347bda4ccc98494a7150e8
SHA256 b96140207296b0ade89a7a8f4e935f767a5ed971552ffade99b09352779e93e3
MD5 a949eeae1771e830004be730adcb5956
SHA1 585671a4aabdb2a04e855e25ed5593f2c7c58bbf
SHA512 498eab9dee6f1f26e66b3f0f1982f2ddf4734567ce6f8a5e7cded1332c4a90d5f7bae2bfca742bb59391798a6252f5af8b1e5837ac5f5feb4eda2335c268be78
SSDEEP 98304:xVrwvJpGJTNZjXbRw/nNRqP1/AzxAMiTHVhbt12naEyL2:xbTNdr8nNoPB1hOnaK
TLSH
T1751612F7B741C076FAD3013DE0B547763FEC676193119AC343E056AAAA20CD2E63964A
MD5 SHA1 SHA512 SSDEEP TLSH

windows:4 windows x86 arch:x86

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

0

Major OS version

4

Entry point

631812

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LINE_NUMS_STRIPPED IMAGE_FILE_32BIT_MACHINE

PDB paths

kernel32

GetLastError GetCurrentThreadId GetCurrentProcess GetCurrentProcessId SetUnhandledExceptionFilter GetModuleHandleW QueryPerformanceCounter GetProcAddress CloseHandle TerminateProcess FreeLibrary SetLastError HeapFree HeapAlloc LocalFree EnterCriticalSection WriteFile WaitForSingleObject GetProcessHeap CreateFileW GetModuleFileNameW GetStdHandle GetStartupInfoW IsDebuggerPresent FindClose FormatMessageW GetFileType GetModuleHandleA InitializeCriticalSection HeapReAlloc CreateEventW HeapSize LoadLibraryExW CreateThread SetFilePointer GetStringTypeW InitializeCriticalSectionAndSpinCount GetEnvironmentStringsW SetStdHandle FreeEnvironmentStringsW IsProcessorFeaturePresent FindNextFileW DeleteFileW SetEndOfFile GetVersionExW CreateFileA OutputDebugStringW VirtualFree lstrlenW GetFullPathNameW LoadResource UnmapViewOfFile GetExitCodeProcess

user32

ShowWindow DestroyWindow ReleaseDC DefWindowProcW PostQuitMessage CreateWindowExW SetWindowLongW GetWindowLongW GetMessageW GetDlgItem SendMessageW GetParent SetWindowTextW SetTimer SetForegroundWindow GetSysColor BeginPaint ScreenToClient SetCursor KillTimer InvalidateRect EnableMenuItem GetWindow GetWindowTextW GetKeyState MessageBoxA CharUpperW

Sharing

General

Malware Config

Signatures

File Explorer

2026-09-08_a949eeae1771e830004be730adcb5956_amadey_elex_glassworm_luca-stealer_njrat_smoke-loader

kernel32

user32

generic