2026-09-28_eaefd9ec86f5307bf798f27b4214c691_amadey_elex_glassworm_luca-stealer_njrat_smoke-loader

General

Target
2026-09-28_eaefd9ec86f5307bf798f27b4214c691_amadey_elex_glassworm_luca-stealer_njrat_smoke-loader
Size 4.0MB
Sample260928-2es2qsde88
SHA256 371cc92e8f44a284796ce7d60c4531e2fecfede61d00d03aa92b298055448ef2
MD5 eaefd9ec86f5307bf798f27b4214c691
SHA1 1fe1b5cecef50c99a8afbd912151d70f7b669745
SHA512 e00a385d0c3f1b67d8cba1100b722cbde98684ed33ba904f6b4d38ee7f6401a7cb1f2665aabd09d18d1d18b276b1ad202c891ee84197dbcfac0f193a1e536f71
SSDEEP 98304:oVrwvJpG2SeFiOh3P6xd5nQZTZJPeXchqCIBv3u8UGGWC2HGzRXpAJclB:of3ofGTQZTv2Lv2PWCEqMc
TLSH
T149161292B601D073F9D650BA927DCFBB5B28F72013275AD3E3A042B4EB744D12735A4A
MD5 SHA1 SHA512 SSDEEP TLSH

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
2026-09-28_eaefd9ec86f5307bf798f27b4214c691_amadey_elex_glassworm_luca-stealer_njrat_smoke-loader

File Explorer

2026-09-28_eaefd9ec86f5307bf798f27b4214c691_amadey_elex_glassworm_luca-stealer_njrat_smoke-loader

.exe 4.0MB

2026-09-28_eaefd9ec86f5307bf798f27b4214c691_amadey_elex_glassworm_luca-stealer_njrat_smoke-loader

IMPHASH 14384d5fbb04fdd9380af76d26a05c61
SHA256 371cc92e8f44a284796ce7d60c4531e2fecfede61d00d03aa92b298055448ef2
MD5 eaefd9ec86f5307bf798f27b4214c691
SHA1 1fe1b5cecef50c99a8afbd912151d70f7b669745
SHA512 e00a385d0c3f1b67d8cba1100b722cbde98684ed33ba904f6b4d38ee7f6401a7cb1f2665aabd09d18d1d18b276b1ad202c891ee84197dbcfac0f193a1e536f71
SSDEEP 98304:oVrwvJpG2SeFiOh3P6xd5nQZTZJPeXchqCIBv3u8UGGWC2HGzRXpAJclB:of3ofGTQZTv2Lv2PWCEqMc
TLSH
T149161292B601D073F9D650BA927DCFBB5B28F72013275AD3E3A042B4EB744D12735A4A
MD5 SHA1 SHA512 SSDEEP TLSH

windows:4 windows x86 arch:x86

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

0

Major OS version

4

Entry point

4494

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LINE_NUMS_STRIPPED IMAGE_FILE_32BIT_MACHINE

PDB paths

kernel32

GetLastError GetCurrentThreadId GetCurrentProcessId GetSystemTimeAsFileTime GetModuleHandleW QueryPerformanceCounter GetProcAddress CloseHandle UnhandledExceptionFilter GetTickCount FreeLibrary WideCharToMultiByte HeapAlloc EnterCriticalSection CreateFileW GetModuleFileNameW GetStdHandle IsDebuggerPresent GetModuleHandleA InitializeCriticalSection HeapReAlloc TlsSetValue TlsAlloc HeapSize WriteConsoleW CreateThread GetFileAttributesW CompareStringW GetStringTypeW LCMapStringW GetOEMCP GetEnvironmentStringsW FreeEnvironmentStringsW IsProcessorFeaturePresent VirtualAlloc GetConsoleCP GetCommandLineA DecodePointer SetEndOfFile GetVersionExW ReleaseMutex EncodePointer lstrlenW LoadLibraryA GetModuleHandleExW GetFullPathNameW UnmapViewOfFile GetExitCodeProcess

user32

TranslateMessage DispatchMessageW DestroyWindow MessageBoxW PostQuitMessage CreateWindowExW GetMessageW GetDC PostMessageW SendMessageW GetClientRect SetWindowPos IsWindow GetParent SetWindowTextW SetTimer LoadIconW SetFocus GetSysColor BeginPaint ScreenToClient SetCursor InvalidateRect EnableMenuItem UpdateWindow CharUpperW ClientToScreen

Sharing

General

Malware Config

Signatures

File Explorer

2026-09-28_eaefd9ec86f5307bf798f27b4214c691_amadey_elex_glassworm_luca-stealer_njrat_smoke-loader

kernel32

user32

generic