2026-10-04_e360516cc340f903d4bd0c81618c321f_amadey_elex_glassworm_luca-stealer_njrat_smoke-loader

General

Target
2026-10-04_e360516cc340f903d4bd0c81618c321f_amadey_elex_glassworm_luca-stealer_njrat_smoke-loader
Size 4.0MB
Sample261004-3tkvcatt5j
SHA256 ec6a444d8346a0070d20102816932bbb4270ccd6597f327f53e58517b8254b78
MD5 e360516cc340f903d4bd0c81618c321f
SHA1 c97ffeadff06026ba4c692633d649999b2c013fe
SHA512 20ece48e318887e15a6774f850f4cc0b3074d3d10a166ff8f2b7c8d88fac90e958c9ddccacbf0eaa07836ed1aec8a178f9ae7c3ab2d2c9e4cf01dfeb1befaa89
SSDEEP 98304:JVrwvJpGRhUDNtPpNZWzjeAnUJJtjoDNux+uvXz4tBPM:JTKDbxNZWXeAnpo+u0/P
TLSH
T1EE16129DF442B172E195103986B79FFB5EBC7621732C90C763C250A8D6A08E2673FA47
MD5 SHA1 SHA512 SSDEEP TLSH

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
2026-10-04_e360516cc340f903d4bd0c81618c321f_amadey_elex_glassworm_luca-stealer_njrat_smoke-loader

File Explorer

2026-10-04_e360516cc340f903d4bd0c81618c321f_amadey_elex_glassworm_luca-stealer_njrat_smoke-loader

.exe 4.0MB

2026-10-04_e360516cc340f903d4bd0c81618c321f_amadey_elex_glassworm_luca-stealer_njrat_smoke-loader

IMPHASH 06d4e667f859a68274c6d55cda7ac3f0
SHA256 ec6a444d8346a0070d20102816932bbb4270ccd6597f327f53e58517b8254b78
MD5 e360516cc340f903d4bd0c81618c321f
SHA1 c97ffeadff06026ba4c692633d649999b2c013fe
SHA512 20ece48e318887e15a6774f850f4cc0b3074d3d10a166ff8f2b7c8d88fac90e958c9ddccacbf0eaa07836ed1aec8a178f9ae7c3ab2d2c9e4cf01dfeb1befaa89
SSDEEP 98304:JVrwvJpGRhUDNtPpNZWzjeAnUJJtjoDNux+uvXz4tBPM:JTKDbxNZWXeAnpo+u0/P
TLSH
T1EE16129DF442B172E195103986B79FFB5EBC7621732C90C763C250A8D6A08E2673FA47
MD5 SHA1 SHA512 SSDEEP TLSH

windows:4 windows x86 arch:x86

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

0

Major OS version

4

Entry point

638141

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LINE_NUMS_STRIPPED IMAGE_FILE_32BIT_MACHINE

PDB paths

kernel32

GetLastError GetCurrentThreadId GetCurrentProcess GetSystemTimeAsFileTime SetUnhandledExceptionFilter GetModuleHandleW QueryPerformanceCounter TerminateProcess UnhandledExceptionFilter GetTickCount SetLastError HeapFree LocalFree DeleteCriticalSection LeaveCriticalSection EnterCriticalSection GetProcessHeap CreateFileW GetCommandLineW SetEvent GetACP GetFileType GetConsoleMode CreateEventW HeapSize WriteConsoleW LoadLibraryExW GetCPInfo TlsFree SetFilePointer GetFileAttributesW CompareStringW GetStringTypeW RtlUnwind LCMapStringW GetOEMCP GetEnvironmentStringsW FreeEnvironmentStringsW IsProcessorFeaturePresent DeleteFileW GetConsoleCP LocalAlloc GetVersionExW OutputDebugStringW VirtualFree LoadLibraryA GetLocaleInfoW UnmapViewOfFile GetExitCodeProcess CreateProcessW

user32

TranslateMessage LoadStringW MessageBoxW CreateWindowExW SetWindowLongW GetWindowLongW GetDlgItem GetWindowRect PostMessageW GetClientRect SetWindowPos EnableWindow EndDialog SetWindowTextW SetTimer LoadIconW SetForegroundWindow GetSysColor PeekMessageW BeginPaint ScreenToClient EnableMenuItem GetWindowTextW UpdateWindow SystemParametersInfoW MessageBoxA CharUpperW

Sharing

General

Malware Config

Signatures

File Explorer

2026-10-04_e360516cc340f903d4bd0c81618c321f_amadey_elex_glassworm_luca-stealer_njrat_smoke-loader

kernel32

user32

generic