2026-10-01_8ce06d23b484b13a97bfa79574285eba_amadey_elex_glassworm_luca-stealer_njrat_smoke-loader

General

Target
2026-10-01_8ce06d23b484b13a97bfa79574285eba_amadey_elex_glassworm_luca-stealer_njrat_smoke-loader
Size 4.0MB
Sample261002-k9pjcss18r
SHA256 4f8fdcafabfabfa9a9aa3ad0bb27dd084177bb3e0c5a3884a973e599af964eea
MD5 8ce06d23b484b13a97bfa79574285eba
SHA1 fc15403d058930bd0f1df9de4af1bc1cb5d9214c
SHA512 caa63f48c565180cfefee64f4a635bdf49c67dd056d10c85103b2eedde995251e7cf74872a57380724c5c9eda6a4f3b76529b29d873ba947724c1e8811a25c32
SSDEEP 98304:CVrwvJpGE2dSjT0kZd1VLgU45ZD1Huxj5d4Xc3Dv5gu:CndI0gLgU4jD1H25d4MzC
TLSH
T1FB1612127D437036E1E2D039936D9BB6AB7E9324732DC0D7278114E05AB81DFE636E86
MD5 SHA1 SHA512 SSDEEP TLSH

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
2026-10-01_8ce06d23b484b13a97bfa79574285eba_amadey_elex_glassworm_luca-stealer_njrat_smoke-loader

File Explorer

2026-10-01_8ce06d23b484b13a97bfa79574285eba_amadey_elex_glassworm_luca-stealer_njrat_smoke-loader

.exe 4.0MB

2026-10-01_8ce06d23b484b13a97bfa79574285eba_amadey_elex_glassworm_luca-stealer_njrat_smoke-loader

IMPHASH ac372ad37c9d5b7740ab9b10fad041c3
SHA256 4f8fdcafabfabfa9a9aa3ad0bb27dd084177bb3e0c5a3884a973e599af964eea
MD5 8ce06d23b484b13a97bfa79574285eba
SHA1 fc15403d058930bd0f1df9de4af1bc1cb5d9214c
SHA512 caa63f48c565180cfefee64f4a635bdf49c67dd056d10c85103b2eedde995251e7cf74872a57380724c5c9eda6a4f3b76529b29d873ba947724c1e8811a25c32
SSDEEP 98304:CVrwvJpGE2dSjT0kZd1VLgU45ZD1Huxj5d4Xc3Dv5gu:CndI0gLgU4jD1H25d4MzC
TLSH
T1FB1612127D437036E1E2D039936D9BB6AB7E9324732DC0D7278114E05AB81DFE636E86
MD5 SHA1 SHA512 SSDEEP TLSH

windows:4 windows x86 arch:x86

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

0

Major OS version

4

Entry point

4372

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LINE_NUMS_STRIPPED IMAGE_FILE_32BIT_MACHINE

PDB paths

kernel32

GetLastError GetCurrentThreadId GetCurrentProcessId GetModuleHandleW QueryPerformanceCounter GetProcAddress CloseHandle TerminateProcess UnhandledExceptionFilter MultiByteToWideChar SetLastError HeapFree LocalFree LeaveCriticalSection EnterCriticalSection WriteFile WaitForSingleObject GetProcessHeap ExitProcess GetStdHandle IsDebuggerPresent ReadFile RaiseException FormatMessageW GetConsoleMode FlushFileBuffers TlsAlloc HeapSetInformation WriteConsoleW LoadLibraryW CreateThread GetCPInfo SetFilePointer GetFileAttributesW CompareStringW GetStringTypeW GetModuleFileNameA GetOEMCP SetStdHandle FindNextFileW FindFirstFileW DeleteFileW VirtualAlloc GetConsoleCP LocalAlloc GetVersionExW ReleaseMutex CreateFileA VirtualFree GetLocaleInfoW CreateDirectoryW UnmapViewOfFile ExpandEnvironmentStringsW

user32

LoadStringW ShowWindow DestroyWindow ReleaseDC DefWindowProcW PostQuitMessage CreateWindowExW GetWindowLongW GetMessageW GetDlgItem GetSystemMetrics PostMessageW SetWindowPos LoadCursorW EndDialog SetWindowTextW LoadIconW SetForegroundWindow PeekMessageW ScreenToClient SetCursor KillTimer RegisterClassW UpdateWindow SystemParametersInfoW GetKeyState CharUpperW ClientToScreen

Sharing

General

Malware Config

Signatures

File Explorer

2026-10-01_8ce06d23b484b13a97bfa79574285eba_amadey_elex_glassworm_luca-stealer_njrat_smoke-loader

kernel32

user32

generic