2026-09-23_9c98968668818730ff6b1c310cc40bc5_amadey_elex_glassworm_luca-stealer_njrat_smoke-loader

General

Target
2026-09-23_9c98968668818730ff6b1c310cc40bc5_amadey_elex_glassworm_luca-stealer_njrat_smoke-loader
Size 4.0MB
Sample260924-ft2frsef29
SHA256 04a9ab6e3db70d49a683c02644b543c82d6f3dd12f8cd81e1781fb51e48c952d
MD5 9c98968668818730ff6b1c310cc40bc5
SHA1 86f93229add9083d0d20aa7e1360874f3f401497
SHA512 fc1d49382e99894e71796b65e235ad45f1656dd9bfc24f99815452b3450de1c6f7d665b72812bdd9503c53ac710102f061c4773151e1b3d8c9e773eed5638d16
SSDEEP 98304:TxfbscxBEdccHTkaosxcv/BfTBVrwvJpG:dBmisexV
TLSH
T1E8161255B862A1B2E3DA06B8947DDEFECE6D552183D8C0CFD24409B45660DC31A3CBFA
MD5 SHA1 SHA512 SSDEEP TLSH

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
2026-09-23_9c98968668818730ff6b1c310cc40bc5_amadey_elex_glassworm_luca-stealer_njrat_smoke-loader

File Explorer

2026-09-23_9c98968668818730ff6b1c310cc40bc5_amadey_elex_glassworm_luca-stealer_njrat_smoke-loader

.exe 4.0MB

2026-09-23_9c98968668818730ff6b1c310cc40bc5_amadey_elex_glassworm_luca-stealer_njrat_smoke-loader

IMPHASH 6b7b5a4007410e46267a6088d5d7b2d8
SHA256 04a9ab6e3db70d49a683c02644b543c82d6f3dd12f8cd81e1781fb51e48c952d
MD5 9c98968668818730ff6b1c310cc40bc5
SHA1 86f93229add9083d0d20aa7e1360874f3f401497
SHA512 fc1d49382e99894e71796b65e235ad45f1656dd9bfc24f99815452b3450de1c6f7d665b72812bdd9503c53ac710102f061c4773151e1b3d8c9e773eed5638d16
SSDEEP 98304:TxfbscxBEdccHTkaosxcv/BfTBVrwvJpG:dBmisexV
TLSH
T1E8161255B862A1B2E3DA06B8947DDEFECE6D552183D8C0CFD24409B45660DC31A3CBFA
MD5 SHA1 SHA512 SSDEEP TLSH

windows:4 windows x86 arch:x86

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

0

Major OS version

4

Entry point

3550321

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LINE_NUMS_STRIPPED IMAGE_FILE_32BIT_MACHINE

PDB paths

kernel32

GetLastError GetCurrentThreadId GetCurrentProcess GetSystemTimeAsFileTime GetModuleHandleW QueryPerformanceCounter TerminateProcess Sleep GetTickCount FreeLibrary SetLastError EnterCriticalSection GetProcessHeap CreateFileW ExitProcess GetCommandLineW FindClose ReadFile RaiseException SetEvent GetACP GetFileType TlsGetValue GetModuleHandleA InitializeCriticalSection GetConsoleMode FlushFileBuffers TlsSetValue TlsAlloc HeapSetInformation WriteConsoleW LoadLibraryW LoadLibraryExW GetCPInfo GetFileAttributesW CompareStringW GetModuleFileNameA InitializeCriticalSectionAndSpinCount GetOEMCP FreeEnvironmentStringsW IsProcessorFeaturePresent DeleteFileW VirtualAlloc GetCommandLineA DecodePointer GetVersionExW ReleaseMutex OutputDebugStringW EncodePointer VirtualFree GetModuleHandleExW CreateDirectoryW GetFullPathNameW LoadResource CreateProcessW

user32

LoadStringW DispatchMessageW ShowWindow DestroyWindow PostQuitMessage CreateWindowExW GetMessageW GetSystemMetrics GetWindowRect PostMessageW IsWindow LoadCursorW LoadIconW SetForegroundWindow GetSysColor EndPaint ScreenToClient KillTimer RegisterClassW EnableMenuItem GetWindowTextW UpdateWindow SystemParametersInfoW MessageBoxA CharUpperW ClientToScreen

Sharing

General

Malware Config

Signatures

File Explorer

2026-09-23_9c98968668818730ff6b1c310cc40bc5_amadey_elex_glassworm_luca-stealer_njrat_smoke-loader

kernel32

user32

generic