2026-10-05_9bee2b485567a41dfdeec39dece276d8_amadey_elex_glassworm_luca-stealer_njrat_smoke-loader

General

Target
2026-10-05_9bee2b485567a41dfdeec39dece276d8_amadey_elex_glassworm_luca-stealer_njrat_smoke-loader
Size 4.0MB
Sample261006-xb94macw7v
SHA256 ccdf5c14096c548c60f89bc01ca25121c77a85ad217aef55a71431d917826a90
MD5 9bee2b485567a41dfdeec39dece276d8
SHA1 261bfe045de828f0bc8491a520560811b30e9236
SHA512 ae40f8115a8cfd78b6b909f31190e9f5051daeba66001f2ab36ddd2da3e65c09d431014dae90d63a60c4ed0541cb04a102eb304cf585b8ee2cb0e184d41bc0ce
SSDEEP 98304:l7kaT9MEMYtCqO+nxGgHX7yOyMP9XVXtVrwvJpG:l7kaXHCqD0KXtPn9
TLSH
T188161220F684C172F7DB00F99176DAB65A3C5625236487CF5FC870B96EA48E1A339E07
MD5 SHA1 SHA512 SSDEEP TLSH

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
2026-10-05_9bee2b485567a41dfdeec39dece276d8_amadey_elex_glassworm_luca-stealer_njrat_smoke-loader

File Explorer

2026-10-05_9bee2b485567a41dfdeec39dece276d8_amadey_elex_glassworm_luca-stealer_njrat_smoke-loader

.exe 4.0MB

2026-10-05_9bee2b485567a41dfdeec39dece276d8_amadey_elex_glassworm_luca-stealer_njrat_smoke-loader

IMPHASH a17281db9445b8c93a54984bfee63aac
SHA256 ccdf5c14096c548c60f89bc01ca25121c77a85ad217aef55a71431d917826a90
MD5 9bee2b485567a41dfdeec39dece276d8
SHA1 261bfe045de828f0bc8491a520560811b30e9236
SHA512 ae40f8115a8cfd78b6b909f31190e9f5051daeba66001f2ab36ddd2da3e65c09d431014dae90d63a60c4ed0541cb04a102eb304cf585b8ee2cb0e184d41bc0ce
SSDEEP 98304:l7kaT9MEMYtCqO+nxGgHX7yOyMP9XVXtVrwvJpG:l7kaXHCqD0KXtPn9
TLSH
T188161220F684C172F7DB00F99176DAB65A3C5625236487CF5FC870B96EA48E1A339E07
MD5 SHA1 SHA512 SSDEEP TLSH

windows:4 windows x86 arch:x86

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

0

Major OS version

4

Entry point

3551509

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LINE_NUMS_STRIPPED IMAGE_FILE_32BIT_MACHINE

PDB paths

kernel32

GetCurrentThreadId GetCurrentProcess GetSystemTimeAsFileTime SetUnhandledExceptionFilter GetProcAddress CloseHandle TerminateProcess UnhandledExceptionFilter WideCharToMultiByte SetLastError HeapFree HeapAlloc LocalFree DeleteCriticalSection LeaveCriticalSection WaitForSingleObject CreateFileW ExitProcess IsDebuggerPresent GetCommandLineW ReadFile TlsGetValue InitializeCriticalSection GetConsoleMode FlushFileBuffers TlsSetValue CreateEventW HeapSetInformation HeapSize WriteConsoleW LoadLibraryW CreateThread GetCPInfo GetFileAttributesW GetStringTypeW GetOEMCP GetEnvironmentStringsW FreeEnvironmentStringsW IsProcessorFeaturePresent FindFirstFileW DeleteFileW GetCommandLineA DecodePointer SetEndOfFile ReleaseMutex OutputDebugStringW EncodePointer LoadLibraryA GetModuleHandleExW GetFullPathNameW LoadResource UnmapViewOfFile GetExitCodeProcess CreateProcessW

user32

ShowWindow DestroyWindow DefWindowProcW MessageBoxW PostQuitMessage GetWindowLongW GetDlgItem PostMessageW GetClientRect EnableWindow LoadCursorW SetWindowTextW SetTimer LoadIconW EndPaint BeginPaint SetCursor KillTimer RegisterClassW EnableMenuItem GetWindow UpdateWindow SystemParametersInfoW GetKeyState CharUpperW ClientToScreen

Sharing

General

Malware Config

Signatures

File Explorer

2026-10-05_9bee2b485567a41dfdeec39dece276d8_amadey_elex_glassworm_luca-stealer_njrat_smoke-loader

kernel32

user32

generic