2026-09-16_dd1a5175d2f1b91bd40ec3ebf2d3a027_amadey_elex_glassworm_luca-stealer_njrat_smoke-loader

General

Target
2026-09-16_dd1a5175d2f1b91bd40ec3ebf2d3a027_amadey_elex_glassworm_luca-stealer_njrat_smoke-loader
Size 4.0MB
Sample260916-tsxcbashjb
SHA256 ea5731ce76b767271d95b3ef9d67e1d8b0d6ab1ed1e9bd0493d3717623ce1a20
MD5 dd1a5175d2f1b91bd40ec3ebf2d3a027
SHA1 6afee76f91b62694ac66532554c393f52d603596
SHA512 e7fc7a68505e066982f4a2ad1dc60344aa4a9398d15392490188d92cd722383bc6f59b0d95139d7b8c641bd1370312a2f2d3df690c3d34c4a5f37a64242603c3
SSDEEP 49152:F0OXFz9wvJpGVbV1PRUIJMre+N3ev/4LVEc:FVrwvJpGVPRvMreQaQVn
TLSH
T15016BEB1B64DD07BE18218356DFD8A264A2C272C13E551C35284E7FACDA80E377F9E16
MD5 SHA1 SHA512 SSDEEP TLSH

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
2026-09-16_dd1a5175d2f1b91bd40ec3ebf2d3a027_amadey_elex_glassworm_luca-stealer_njrat_smoke-loader

File Explorer

2026-09-16_dd1a5175d2f1b91bd40ec3ebf2d3a027_amadey_elex_glassworm_luca-stealer_njrat_smoke-loader

.exe 4.0MB

2026-09-16_dd1a5175d2f1b91bd40ec3ebf2d3a027_amadey_elex_glassworm_luca-stealer_njrat_smoke-loader

IMPHASH a57018c0eea90cfbbb8be6fa516be451
SHA256 ea5731ce76b767271d95b3ef9d67e1d8b0d6ab1ed1e9bd0493d3717623ce1a20
MD5 dd1a5175d2f1b91bd40ec3ebf2d3a027
SHA1 6afee76f91b62694ac66532554c393f52d603596
SHA512 e7fc7a68505e066982f4a2ad1dc60344aa4a9398d15392490188d92cd722383bc6f59b0d95139d7b8c641bd1370312a2f2d3df690c3d34c4a5f37a64242603c3
SSDEEP 49152:F0OXFz9wvJpGVbV1PRUIJMre+N3ev/4LVEc:FVrwvJpGVPRvMreQaQVn
TLSH
T15016BEB1B64DD07BE18218356DFD8A264A2C272C13E551C35284E7FACDA80E377F9E16
MD5 SHA1 SHA512 SSDEEP TLSH

windows:4 windows x86 arch:x86

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

0

Major OS version

4

Entry point

4180095

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LINE_NUMS_STRIPPED IMAGE_FILE_32BIT_MACHINE

PDB paths

kernel32

GetCurrentThreadId GetCurrentProcessId SetUnhandledExceptionFilter GetModuleHandleW GetProcAddress CloseHandle TerminateProcess UnhandledExceptionFilter Sleep GetTickCount MultiByteToWideChar WideCharToMultiByte SetLastError HeapFree HeapAlloc DeleteCriticalSection EnterCriticalSection WriteFile WaitForSingleObject ExitProcess GetModuleFileNameW GetFileType TlsGetValue GetModuleHandleA GetConsoleMode FlushFileBuffers TlsSetValue CreateEventW HeapSize WriteConsoleW LoadLibraryW GetCPInfo TlsFree SetFilePointer GetStringTypeW InitializeCriticalSectionAndSpinCount GetEnvironmentStringsW IsValidCodePage FindFirstFileW DeleteFileW VirtualAlloc GetConsoleCP DecodePointer GetVersionExW ReleaseMutex lstrlenW LoadLibraryA GetModuleHandleExW GetFullPathNameW LoadResource UnmapViewOfFile GetExitCodeProcess ExpandEnvironmentStringsW

user32

LoadStringW ReleaseDC CreateWindowExW GetSystemMetrics GetDC GetWindowRect SendMessageW GetClientRect SetWindowPos LoadCursorW SetTimer LoadIconW SetForegroundWindow GetSysColor PeekMessageW EndPaint BeginPaint KillTimer InvalidateRect RegisterClassW GetWindowTextW SystemParametersInfoW GetKeyState MessageBoxA ClientToScreen

Sharing

General

Malware Config

Signatures

File Explorer

2026-09-16_dd1a5175d2f1b91bd40ec3ebf2d3a027_amadey_elex_glassworm_luca-stealer_njrat_smoke-loader

kernel32

user32

generic