2026-10-07_0a7b57a5e5bfc89fd923c418e0c3924a_amadey_elex_glassworm_luca-stealer_njrat_smoke-loader

General

Target
2026-10-07_0a7b57a5e5bfc89fd923c418e0c3924a_amadey_elex_glassworm_luca-stealer_njrat_smoke-loader
Size 4.0MB
Sample261009-2qdfesds4m
SHA256 c9d9fbc5f94b535d4216157b2663b32a2277010e529a281d74075d0fa5d05b3e
MD5 0a7b57a5e5bfc89fd923c418e0c3924a
SHA1 569cbf115f8ecc3dd48a6f51318cd63a871167d1
SHA512 c3725e73d5543f866890b975c25946fd80af0a12d3a3e37123eef7566699d4cf396b79d849465598ac9463f4171e2202cd5b17b042b50193fe1b887672c6573f
SSDEEP 98304:0VrwvJpGnMwlUBUnpelNMb4B7fT5FYlwwSxZc7be:01SOpesb4B7fNFYa7xG7be
TLSH
T1B4161262B20C9436F1F210F891EF8BB6DE6C6A2457B79CC3938064B41B634D736B8657
MD5 SHA1 SHA512 SSDEEP TLSH

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
2026-10-07_0a7b57a5e5bfc89fd923c418e0c3924a_amadey_elex_glassworm_luca-stealer_njrat_smoke-loader

File Explorer

2026-10-07_0a7b57a5e5bfc89fd923c418e0c3924a_amadey_elex_glassworm_luca-stealer_njrat_smoke-loader

.exe 4.0MB

2026-10-07_0a7b57a5e5bfc89fd923c418e0c3924a_amadey_elex_glassworm_luca-stealer_njrat_smoke-loader

IMPHASH 02f92cb45f39e5c7c23d4668e60512c6
SHA256 c9d9fbc5f94b535d4216157b2663b32a2277010e529a281d74075d0fa5d05b3e
MD5 0a7b57a5e5bfc89fd923c418e0c3924a
SHA1 569cbf115f8ecc3dd48a6f51318cd63a871167d1
SHA512 c3725e73d5543f866890b975c25946fd80af0a12d3a3e37123eef7566699d4cf396b79d849465598ac9463f4171e2202cd5b17b042b50193fe1b887672c6573f
SSDEEP 98304:0VrwvJpGnMwlUBUnpelNMb4B7fT5FYlwwSxZc7be:01SOpesb4B7fNFYa7xG7be
TLSH
T1B4161262B20C9436F1F210F891EF8BB6DE6C6A2457B79CC3938064B41B634D736B8657
MD5 SHA1 SHA512 SSDEEP TLSH

windows:4 windows x86 arch:x86

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

0

Major OS version

4

Entry point

633373

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LINE_NUMS_STRIPPED IMAGE_FILE_32BIT_MACHINE

PDB paths

kernel32

GetSystemTimeAsFileTime GetModuleHandleW QueryPerformanceCounter GetProcAddress CloseHandle GetTickCount MultiByteToWideChar SetLastError HeapFree HeapAlloc DeleteCriticalSection CreateFileW GetStdHandle FindClose ReadFile RaiseException SetEvent FormatMessageW InitializeCriticalSection GetConsoleMode TlsSetValue CreateEventW TlsAlloc WriteConsoleW LoadLibraryW LoadLibraryExW TlsFree GetFileAttributesW CompareStringW InitializeCriticalSectionAndSpinCount FreeEnvironmentStringsW IsProcessorFeaturePresent IsValidCodePage GetConsoleCP LocalAlloc GetCommandLineA GetVersionExW ReleaseMutex CreateFileA OutputDebugStringW GetFileSize VirtualFree lstrlenW LoadLibraryA GetLocaleInfoW GetFullPathNameW GetExitCodeProcess

user32

DispatchMessageW DestroyWindow ReleaseDC DefWindowProcW MessageBoxW GetWindowLongW GetDlgItem GetDC GetWindowRect PostMessageW SendMessageW GetClientRect IsWindow SetWindowTextW LoadIconW SetFocus GetSysColor PeekMessageW KillTimer InvalidateRect RegisterClassW EnableMenuItem GetWindow UpdateWindow SystemParametersInfoW MessageBoxA CharUpperW ClientToScreen

Resubmissions

Sharing

General

Malware Config

Signatures

File Explorer

2026-10-07_0a7b57a5e5bfc89fd923c418e0c3924a_amadey_elex_glassworm_luca-stealer_njrat_smoke-loader

kernel32

user32

generic