2026-09-21_e8fcd8545b4783b3a69b49991d6d90f5_amadey_elex_glassworm_luca-stealer_njrat_smoke-loader

General

Target
2026-09-21_e8fcd8545b4783b3a69b49991d6d90f5_amadey_elex_glassworm_luca-stealer_njrat_smoke-loader
Size 4.0MB
Sample260922-lbaszscf97
SHA256 5f0ad87ac6b22ecd7b2ada1b9d37df24aca2a81221f6f5b6242bb336da383803
MD5 e8fcd8545b4783b3a69b49991d6d90f5
SHA1 f36822697a9c56892a1034543b193e352e26218d
SHA512 2f09d476055d4439ab3c0757ce661729ef9cd40d2c578aeac9b7dc7ec815f07963e171f416f6e912a6c8e780a6349d1243b91350f043e75ab892cf675104fca5
SSDEEP 49152:10OXFz9wvJpGVbU3likhfMPbWbUIT96wkxcQWtCAlhtX1Zzx:1VrwvJpGALMPbWYIT6xvW9fXZ9
TLSH
T15016BE1D746160F6ED9B00F4E365FAADAA1CE128C3664CFF528454B2DBE01DA22316FD
MD5 SHA1 SHA512 SSDEEP TLSH

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
2026-09-21_e8fcd8545b4783b3a69b49991d6d90f5_amadey_elex_glassworm_luca-stealer_njrat_smoke-loader

File Explorer

2026-09-21_e8fcd8545b4783b3a69b49991d6d90f5_amadey_elex_glassworm_luca-stealer_njrat_smoke-loader

.exe 4.0MB

2026-09-21_e8fcd8545b4783b3a69b49991d6d90f5_amadey_elex_glassworm_luca-stealer_njrat_smoke-loader

IMPHASH 9f97e9f728dd5daeb5262d70be5dcfae
SHA256 5f0ad87ac6b22ecd7b2ada1b9d37df24aca2a81221f6f5b6242bb336da383803
MD5 e8fcd8545b4783b3a69b49991d6d90f5
SHA1 f36822697a9c56892a1034543b193e352e26218d
SHA512 2f09d476055d4439ab3c0757ce661729ef9cd40d2c578aeac9b7dc7ec815f07963e171f416f6e912a6c8e780a6349d1243b91350f043e75ab892cf675104fca5
SSDEEP 49152:10OXFz9wvJpGVbU3likhfMPbWbUIT96wkxcQWtCAlhtX1Zzx:1VrwvJpGALMPbWYIT6xvW9fXZ9
TLSH
T15016BE1D746160F6ED9B00F4E365FAADAA1CE128C3664CFF528454B2DBE01DA22316FD
MD5 SHA1 SHA512 SSDEEP TLSH

windows:4 windows x86 arch:x86

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

0

Major OS version

4

Entry point

4179970

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LINE_NUMS_STRIPPED IMAGE_FILE_32BIT_MACHINE

PDB paths

kernel32

GetLastError GetCurrentThreadId GetCurrentProcess GetSystemTimeAsFileTime SetUnhandledExceptionFilter GetProcAddress TerminateProcess Sleep FreeLibrary WideCharToMultiByte SetLastError DeleteCriticalSection LeaveCriticalSection EnterCriticalSection CreateFileW ExitProcess GetStdHandle GetCommandLineW SetEvent FormatMessageW GetFileType TlsGetValue GetModuleHandleA InitializeCriticalSection GetConsoleMode TlsSetValue TlsAlloc WriteConsoleW LoadLibraryW TlsFree SetFilePointer RtlUnwind GetModuleFileNameA InitializeCriticalSectionAndSpinCount GetEnvironmentStringsW FindNextFileW FindFirstFileW DeleteFileW GetConsoleCP LocalAlloc ResetEvent GetVersionExW VirtualFree GetLocaleInfoW CreateDirectoryW GetFullPathNameW LoadResource GetExitCodeProcess CreateProcessW

user32

LoadStringW DispatchMessageW ShowWindow DestroyWindow DefWindowProcW MessageBoxW GetMessageW GetWindowRect SetWindowPos EndDialog SetWindowTextW LoadIconW SetFocus GetSysColor PeekMessageW BeginPaint ScreenToClient SetCursor KillTimer InvalidateRect EnableMenuItem GetWindowTextW SystemParametersInfoW CharUpperW ClientToScreen

Sharing

General

Malware Config

Signatures

File Explorer

2026-09-21_e8fcd8545b4783b3a69b49991d6d90f5_amadey_elex_glassworm_luca-stealer_njrat_smoke-loader

kernel32

user32

generic