2026-10-08_23863d40f979b2889d51d66a4a585d7e_amadey_elex_glassworm_luca-stealer_njrat_smoke-loader

General

Target
2026-10-08_23863d40f979b2889d51d66a4a585d7e_amadey_elex_glassworm_luca-stealer_njrat_smoke-loader
Size 4.0MB
Sample261009-xxql4sty7j
SHA256 e84e16adeb8db455a45cb350e1c97d8072debec375d09bb8892a90c2c2512d7f
MD5 23863d40f979b2889d51d66a4a585d7e
SHA1 c79a727a53d740eab7258829a08f53a01653e5f4
SHA512 ba8d6676c09db26614c3d44417144a190ae29028299d2c0c51ea19198803dc3ec57bacaf17fe6498642e11a4b54493371dad49b6c6db7afa7ebe8592ca70431a
SSDEEP 49152:L40PRNV8retYF08zpS8aiIl0OXFz9wvJpGVb:M018re608zo8a5VrwvJpG
TLSH
T1D1169DE76F4080F2E39E7479D5AD4B7ACB38532077909BF772B065E1EA500D366B8206
MD5 SHA1 SHA512 SSDEEP TLSH

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
2026-10-08_23863d40f979b2889d51d66a4a585d7e_amadey_elex_glassworm_luca-stealer_njrat_smoke-loader

File Explorer

2026-10-08_23863d40f979b2889d51d66a4a585d7e_amadey_elex_glassworm_luca-stealer_njrat_smoke-loader

.exe 4.0MB

2026-10-08_23863d40f979b2889d51d66a4a585d7e_amadey_elex_glassworm_luca-stealer_njrat_smoke-loader

IMPHASH 6e3bbc9d2108319d01eaa885c2850258
SHA256 e84e16adeb8db455a45cb350e1c97d8072debec375d09bb8892a90c2c2512d7f
MD5 23863d40f979b2889d51d66a4a585d7e
SHA1 c79a727a53d740eab7258829a08f53a01653e5f4
SHA512 ba8d6676c09db26614c3d44417144a190ae29028299d2c0c51ea19198803dc3ec57bacaf17fe6498642e11a4b54493371dad49b6c6db7afa7ebe8592ca70431a
SSDEEP 49152:L40PRNV8retYF08zpS8aiIl0OXFz9wvJpGVb:M018re608zo8a5VrwvJpG
TLSH
T1D1169DE76F4080F2E39E7479D5AD4B7ACB38532077909BF772B065E1EA500D366B8206
MD5 SHA1 SHA512 SSDEEP TLSH

windows:4 windows x86 arch:x86

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

0

Major OS version

4

Entry point

9798

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LINE_NUMS_STRIPPED IMAGE_FILE_32BIT_MACHINE

PDB paths

kernel32

GetCurrentThreadId GetCurrentProcessId SetUnhandledExceptionFilter GetModuleHandleW GetProcAddress CloseHandle TerminateProcess UnhandledExceptionFilter Sleep GetTickCount MultiByteToWideChar LocalFree DeleteCriticalSection EnterCriticalSection WriteFile WaitForSingleObject CreateFileW ExitProcess GetStartupInfoW RaiseException GetFileType TlsGetValue InitializeCriticalSection HeapReAlloc FlushFileBuffers TlsSetValue CreateEventW WriteConsoleW GetCPInfo TlsFree SetFilePointer GetFileAttributesW CompareStringW LCMapStringW GetOEMCP GetEnvironmentStringsW SetStdHandle FindFirstFileW DeleteFileW LocalAlloc DecodePointer ResetEvent ReleaseMutex CreateFileA VirtualFree GetLocaleInfoW CreateDirectoryW UnmapViewOfFile GetExitCodeProcess

user32

LoadStringW DefWindowProcW MessageBoxW PostQuitMessage SetWindowLongW GetDlgItem GetSystemMetrics GetDC IsWindow LoadCursorW GetParent EndDialog SetWindowTextW SetTimer LoadIconW SetFocus SetForegroundWindow GetSysColor PeekMessageW EndPaint BeginPaint ScreenToClient SetCursor InvalidateRect GetWindowTextW UpdateWindow SystemParametersInfoW GetKeyState

Sharing

General

Malware Config

Signatures

File Explorer

2026-10-08_23863d40f979b2889d51d66a4a585d7e_amadey_elex_glassworm_luca-stealer_njrat_smoke-loader

kernel32

user32

generic