2026-10-01_37775d86115808c876ad5565f7795818_akira_amadey_darkgate_elex_glassworm_luca-stealer_njrat_smoke-loader_wapomi

Sharing

Copy URL Twitter E-mail

General

Target
2026-10-01_37775d86115808c876ad5565f7795818_akira_amadey_darkgate_elex_glassworm_luca-stealer_njrat_smoke-loader_wapomi
Size 4.7MB
Sample261002-t8glssed65
SHA256 8921ab927384ac16c3a4237d91f9d8a4ea90d64c025659ebc9d0a8412ee28cb8
MD5 37775d86115808c876ad5565f7795818
SHA1 ae906bcd402791d8e38e94d6047efb92560b0c44
SHA512 14f08f5242ec714930a75ac635d060b9dade16d04db614cc27cf6e4f57b00abcbb656d28e53b63d35dc2c960d0f21a0770acd6656fc628c5ef5a436aa02eb1c3
SSDEEP 98304:WI4XFcGtDzrkL5e0wxOI1JMixFjzeABWW7I0:CFP85e3xXxpeABWW7D
TLSH
T14C36F1107546C0B2D4C801B09A3EAFAB567C5E740B2048D7B7C46EE9AE709E376B6F47
MD5 SHA1 SHA512 SSDEEP TLSH

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
2026-10-01_37775d86115808c876ad5565f7795818_akira_amadey_darkgate_elex_glassworm_luca-stealer_njrat_smoke-loader_wapomi

File Explorer

2026-10-01_37775d86115808c876ad5565f7795818_akira_amadey_darkgate_elex_glassworm_luca-stealer_njrat_smoke-loader_wapomi

.exe 4.7MB

2026-10-01_37775d86115808c876ad5565f7795818_akira_amadey_darkgate_elex_glassworm_luca-stealer_njrat_smoke-loader_wapomi

IMPHASH 9cc7b71f28710d2296aec501e85027d6
SHA256 8921ab927384ac16c3a4237d91f9d8a4ea90d64c025659ebc9d0a8412ee28cb8
MD5 37775d86115808c876ad5565f7795818
SHA1 ae906bcd402791d8e38e94d6047efb92560b0c44
SHA512 14f08f5242ec714930a75ac635d060b9dade16d04db614cc27cf6e4f57b00abcbb656d28e53b63d35dc2c960d0f21a0770acd6656fc628c5ef5a436aa02eb1c3
SSDEEP 98304:WI4XFcGtDzrkL5e0wxOI1JMixFjzeABWW7I0:CFP85e3xXxpeABWW7D
TLSH
T14C36F1107546C0B2D4C801B09A3EAFAB567C5E740B2048D7B7C46EE9AE709E376B6F47
MD5 SHA1 SHA512 SSDEEP TLSH

windows:6 windows x86 arch:x86

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

Major OS version

Entry point

4915200

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths

d3d11

D3D11CreateDeviceAndSwapChain

shell32

ShellExecuteW

winhttp

WinHttpOpen WinHttpCloseHandle WinHttpConnect WinHttpSetOption WinHttpOpenRequest WinHttpSendRequest WinHttpReceiveResponse WinHttpWebSocketReceive WinHttpWebSocketClose WinHttpWebSocketCompleteUpgrade WinHttpWebSocketSend

wininet

InternetCloseHandle InternetOpenA InternetConnectA InternetQueryOptionW InternetSetOptionA InternetQueryOptionA HttpOpenRequestA HttpSendRequestA HttpQueryInfoA HttpQueryInfoW InternetSetCookieA InternetReadFile

ws2_32

htons socket closesocket recv send WSAStartup WSAGetLastError InetPtonW __WSAFDIsSet select connect

iphlpapi

GetAdaptersInfo GetAdaptersAddresses

advapi32

RegOpenKeyExA GetTokenInformation ConvertSidToStringSidW ConvertStringSecurityDescriptorToSecurityDescriptorW CryptAcquireContextA CryptReleaseContext CryptGenRandom RegGetValueA OpenProcessToken RegCloseKey

bcrypt

BCryptCloseAlgorithmProvider BCryptHash BCryptOpenAlgorithmProvider

kernel32

GetUserDefaultLCID IsValidLocale GetLocaleInfoW LCMapStringW CompareStringW GetTimeFormatW GetDateFormatW LoadLibraryExW EnumSystemLocalesW GetTimeZoneInformation GetFileType HeapAlloc HeapFree UnhandledExceptionFilter IsDebuggerPresent TerminateProcess FlushFileBuffers GetConsoleOutputCP VirtualProtect ExitProcess GetStdHandle ReadConsoleW SetFilePointerEx HeapReAlloc IsValidCodePage GetACP GetOEMCP GetCommandLineA GetCommandLineW GetEnvironmentStringsW FreeEnvironmentStringsW SetEnvironmentVariableW SetStdHandle GetProcessHeap GetModuleHandleExW FreeLibraryAndExitThread ExitThread GetEnvironmentVariableW CreateFileW GetFileAttributesW GetFileSizeEx WriteFile CloseHandle WaitForSingleObject Sleep GetExitCodeProcess OpenProcess GetLocalTime GetWindowsDirectoryW WideCharToMultiByte OutputDebugStringA GlobalAlloc GlobalUnlock GlobalLock GlobalFree MultiByteToWideChar VerSetConditionMask QueryPerformanceCounter QueryPerformanceFrequency FreeLibrary GetModuleHandleA GetModuleHandleW GetProcAddress LoadLibraryA GetLocaleInfoA IsDBCSLeadByte GetLastError HeapSize DisconnectNamedPipe CreateNamedPipeW SetEvent CreateEventW GetCurrentProcess CreateThread GetTickCount64 LocalFree GetNamedPipeClientProcessId CreateRemoteThread GetExitCodeThread VirtualQuery VirtualAllocEx WriteProcessMemory VirtualFreeEx IsWow64Process GetModuleFileNameW QueryFullProcessImageNameW CompareStringOrdinal CreateToolhelp32Snapshot Process32FirstW Process32NextW Module32FirstW Module32NextW GetCurrentProcessId LoadResource LockResource SizeofResource FindResourceW MoveFileExW GetComputerNameW HeapQueryInformation LCMapStringEx DeleteCriticalSection InitializeCriticalSectionEx LeaveCriticalSection EnterCriticalSection DecodePointer EncodePointer SleepConditionVariableSRW WakeAllConditionVariable WakeConditionVariable TryAcquireSRWLockExclusive AcquireSRWLockExclusive ReleaseSRWLockExclusive GetCurrentThreadId WaitForSingleObjectEx GetFileInformationByHandleEx CopyFile2 CreateFile2 SetFileInformationByHandle GetFileInformationByHandle GetFileAttributesExW FindNextFileW FindFirstFileExW FindFirstFileW FindClose CreateDirectoryW GetLocaleInfoEx FormatMessageA GetSystemTimePreciseAsFileTime SetUnhandledExceptionFilter GetStartupInfoW RaiseException RtlUnwind GetConsoleMode SetEndOfFile ReadFile WriteConsoleW GetCPInfo GetStringTypeW FlsFree FlsSetValue FlsGetValue FlsAlloc SetLastError IsProcessorFeaturePresent GetSystemTimeAsFileTime ConnectNamedPipe InitializeSListHead

user32

WindowFromPoint ScreenToClient ClientToScreen GetCursorPos SetCursor SetCursorPos AdjustWindowRectEx GetClientRect GetPropA SetPropA ReleaseDC GetDC SetForegroundWindow GetForegroundWindow IsWindowUnicode ReleaseCapture SetCapture GetCapture GetKeyState SetFocus BringWindowToTop LoadCursorW SetWindowPos SetLayeredWindowAttributes GetWindowLongW GetMessageExtraInfo TrackMouseEvent GetKeyboardLayout EmptyClipboard GetClipboardData SetClipboardData CloseClipboard OpenClipboard GetMonitorInfoW MonitorFromPoint MessageBoxW UpdateWindow ShowWindow DestroyWindow CreateWindowExW RegisterClassExW UnregisterClassW PostQuitMessage DefWindowProcW PeekMessageW DispatchMessageW TranslateMessage MonitorFromWindow EnumDisplayMonitors IsChild SetWindowLongW SetProcessDPIAware IsIconic

gdi32

GetDeviceCaps

ole32

CoSetProxyBlanket CoCreateInstance CoUninitialize CoInitializeSecurity CoInitializeEx

oleaut32

VariantClear VariantInit SysFreeString SysAllocString

d3dcompiler_47

D3DCompile

imm32

ImmSetCompositionWindow ImmReleaseContext ImmSetCandidateWindow ImmGetContext

Name

.text

Size

1.0MB

Virtual Size

1.0MB

Characteristics

IMAGE_SCN_CNT_CODE IMAGE_SCN_MEM_EXECUTE IMAGE_SCN_MEM_READ

Name

.rdata

Size

203KB

Virtual Size

202KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.data

Size

8KB

Virtual Size

11KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.fptable

Size

512B

Virtual Size

128B

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.lQB

Size

1.1MB

Virtual Size

1.1MB

Characteristics

IMAGE_SCN_CNT_CODE IMAGE_SCN_MEM_EXECUTE IMAGE_SCN_MEM_READ

Name

.reloc

Size

33KB

Virtual Size

33KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.rsrc

Size

2.3MB

Virtual Size

2.3MB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

��q��u5

Size

16KB

Virtual Size

20KB

Characteristics

IMAGE_SCN_CNT_CODE IMAGE_SCN_MEM_EXECUTE IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Sharing

General

Malware Config

Signatures

File Explorer

2026-10-01_37775d86115808c876ad5565f7795818_akira_amadey_darkgate_elex_glassworm_luca-stealer_njrat_smoke-loader_wapomi

d3d11

shell32

winhttp

wininet

ws2_32

iphlpapi

advapi32

bcrypt

kernel32

user32

gdi32

ole32

oleaut32

d3dcompiler_47

imm32

generic