2026-10-05_79d0f5cc481e19c7cc8f736525b69297_amadey_elex_glassworm_luca-stealer_njrat_smoke-loader

General

Target
2026-10-05_79d0f5cc481e19c7cc8f736525b69297_amadey_elex_glassworm_luca-stealer_njrat_smoke-loader
Size 4.0MB
Sample261006-z6embavy2p
SHA256 e163a273de66206fc643ddbc34a36d7af5df0b9b8c69f8fcca86e027ccf52918
MD5 79d0f5cc481e19c7cc8f736525b69297
SHA1 4aa37caa4de720b937eeb1d900803b62707641cd
SHA512 8b56ff0787ac3f57a9843260b5a117fbb008709ee91ac8f8904867ed500fd2776752aac196aaa4be5d6fe1e0bfeff8d21cccf339cd49aa77465f72db9dfbd653
SSDEEP 98304:AVrwvJpGb+TyRB3mj6j1qP+cRXBx+5RhbmVz055KdfXIY7T:AgmRB0qNcEdQz055Kdb7
TLSH
T1D81612797539D176D2E20036D1E78B7A1E385F257328D4D7E2C029BDE6B00D2B235ACA
MD5 SHA1 SHA512 SSDEEP TLSH

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
2026-10-05_79d0f5cc481e19c7cc8f736525b69297_amadey_elex_glassworm_luca-stealer_njrat_smoke-loader

File Explorer

2026-10-05_79d0f5cc481e19c7cc8f736525b69297_amadey_elex_glassworm_luca-stealer_njrat_smoke-loader

.exe 4.0MB

2026-10-05_79d0f5cc481e19c7cc8f736525b69297_amadey_elex_glassworm_luca-stealer_njrat_smoke-loader

IMPHASH e69aa210c9b4ec647288937f4e489474
SHA256 e163a273de66206fc643ddbc34a36d7af5df0b9b8c69f8fcca86e027ccf52918
MD5 79d0f5cc481e19c7cc8f736525b69297
SHA1 4aa37caa4de720b937eeb1d900803b62707641cd
SHA512 8b56ff0787ac3f57a9843260b5a117fbb008709ee91ac8f8904867ed500fd2776752aac196aaa4be5d6fe1e0bfeff8d21cccf339cd49aa77465f72db9dfbd653
SSDEEP 98304:AVrwvJpGb+TyRB3mj6j1qP+cRXBx+5RhbmVz055KdfXIY7T:AgmRB0qNcEdQz055Kdb7
TLSH
T1D81612797539D176D2E20036D1E78B7A1E385F257328D4D7E2C029BDE6B00D2B235ACA
MD5 SHA1 SHA512 SSDEEP TLSH

windows:4 windows x86 arch:x86

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

0

Major OS version

4

Entry point

7487

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LINE_NUMS_STRIPPED IMAGE_FILE_32BIT_MACHINE

PDB paths

kernel32

GetCurrentThreadId GetCurrentProcess SetUnhandledExceptionFilter GetModuleHandleW CloseHandle TerminateProcess UnhandledExceptionFilter Sleep GetTickCount MultiByteToWideChar SetLastError HeapFree HeapAlloc LocalFree DeleteCriticalSection GetProcessHeap CreateFileW ExitProcess GetModuleFileNameW GetStdHandle IsDebuggerPresent GetCommandLineW ReadFile RaiseException SetEvent GetFileType TlsGetValue GetModuleHandleA TlsSetValue TlsAlloc WriteConsoleW LoadLibraryExW GetCPInfo TlsFree GetFileAttributesW CompareStringW LCMapStringW GetModuleFileNameA GetEnvironmentStringsW SetStdHandle FindNextFileW VirtualAlloc GetConsoleCP GetCommandLineA DecodePointer ResetEvent GetFileSize VirtualFree GetModuleHandleExW GetLocaleInfoW GetFullPathNameW UnmapViewOfFile ExpandEnvironmentStringsW CreateProcessW

user32

TranslateMessage DispatchMessageW ShowWindow DestroyWindow ReleaseDC PostQuitMessage CreateWindowExW SetWindowLongW GetSystemMetrics GetWindowRect SendMessageW EnableWindow IsWindow LoadCursorW EndDialog SetTimer LoadIconW GetSysColor PeekMessageW EndPaint BeginPaint SetCursor KillTimer InvalidateRect RegisterClassW EnableMenuItem UpdateWindow GetKeyState ClientToScreen

Sharing

General

Malware Config

Signatures

File Explorer

2026-10-05_79d0f5cc481e19c7cc8f736525b69297_amadey_elex_glassworm_luca-stealer_njrat_smoke-loader

kernel32

user32

generic