2026-09-22_75bc83a63a91e3c5791ecc56bac790db_amadey_elex_glassworm_luca-stealer_njrat_smoke-loader

General

Target
2026-09-22_75bc83a63a91e3c5791ecc56bac790db_amadey_elex_glassworm_luca-stealer_njrat_smoke-loader
Size 4.0MB
Sample260922-ycevjswt2j
SHA256 ed01ee62ab90482c6f27abd80b145baf799c8b87744ab978eb594deced40fdcd
MD5 75bc83a63a91e3c5791ecc56bac790db
SHA1 ffd6dd54d7138bb5f7b6bbc231c1993ab9725dfa
SHA512 dad1ccb970932d4177407dfdf6b1a82d6d6b34c51120e311decb546cf50a02f4ee462dc30634f0a86a39cd30eef1edf3393f0c5b5f83bd83fd67ac4212fbbd63
SSDEEP 49152:2E9Vq+kgGtT2gibLsTqfh629lG0OXFz9wvJpGVb:j9V9Ly2g0LGqJ627GVrwvJpG
TLSH
T14916D032B7017CE2F58203B56A60EE7F4A29A520B72454D7BBC58E6D937C7D025372CA
MD5 SHA1 SHA512 SSDEEP TLSH

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
2026-09-22_75bc83a63a91e3c5791ecc56bac790db_amadey_elex_glassworm_luca-stealer_njrat_smoke-loader

File Explorer

2026-09-22_75bc83a63a91e3c5791ecc56bac790db_amadey_elex_glassworm_luca-stealer_njrat_smoke-loader

.exe 4.0MB

2026-09-22_75bc83a63a91e3c5791ecc56bac790db_amadey_elex_glassworm_luca-stealer_njrat_smoke-loader

IMPHASH 7ca24948208ab315310263cdee9c800a
SHA256 ed01ee62ab90482c6f27abd80b145baf799c8b87744ab978eb594deced40fdcd
MD5 75bc83a63a91e3c5791ecc56bac790db
SHA1 ffd6dd54d7138bb5f7b6bbc231c1993ab9725dfa
SHA512 dad1ccb970932d4177407dfdf6b1a82d6d6b34c51120e311decb546cf50a02f4ee462dc30634f0a86a39cd30eef1edf3393f0c5b5f83bd83fd67ac4212fbbd63
SSDEEP 49152:2E9Vq+kgGtT2gibLsTqfh629lG0OXFz9wvJpGVb:j9V9Ly2g0LGqJ627GVrwvJpG
TLSH
T14916D032B7017CE2F58203B56A60EE7F4A29A520B72454D7BBC58E6D937C7D025372CA
MD5 SHA1 SHA512 SSDEEP TLSH

windows:4 windows x86 arch:x86

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

0

Major OS version

4

Entry point

3551103

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LINE_NUMS_STRIPPED IMAGE_FILE_32BIT_MACHINE

PDB paths

kernel32

GetLastError GetCurrentThreadId GetSystemTimeAsFileTime SetUnhandledExceptionFilter GetModuleHandleW QueryPerformanceCounter GetProcAddress CloseHandle UnhandledExceptionFilter Sleep GetTickCount SetLastError HeapFree HeapAlloc LocalFree EnterCriticalSection WaitForSingleObject CreateFileW ExitProcess GetStdHandle IsDebuggerPresent GetCommandLineW FindClose SetEvent GetACP TlsGetValue InitializeCriticalSection TlsSetValue CreateEventW HeapSize LoadLibraryExW CreateThread TlsFree GetFileAttributesW GetStringTypeW RtlUnwind LCMapStringW InitializeCriticalSectionAndSpinCount SetStdHandle FreeEnvironmentStringsW IsValidCodePage DeleteFileW GetConsoleCP DecodePointer ReleaseMutex OutputDebugStringW GetFileSize EncodePointer VirtualFree lstrlenW LoadLibraryA CreateDirectoryW GetFullPathNameW ExpandEnvironmentStringsW CreateProcessW

user32

TranslateMessage DispatchMessageW ShowWindow DestroyWindow DefWindowProcW MessageBoxW PostQuitMessage GetSystemMetrics PostMessageW EnableWindow EndDialog SetWindowTextW SetFocus GetSysColor PeekMessageW EndPaint BeginPaint ScreenToClient InvalidateRect EnableMenuItem UpdateWindow GetKeyState MessageBoxA CharUpperW ClientToScreen

Sharing

General

Malware Config

Signatures

File Explorer

2026-09-22_75bc83a63a91e3c5791ecc56bac790db_amadey_elex_glassworm_luca-stealer_njrat_smoke-loader

kernel32

user32

generic