2026-10-13_3e5ac520ef37bbf6ecf88173ca7574f7_amadey_elex_glassworm_luca-stealer_njrat_smoke-loader

General

Target
2026-10-13_3e5ac520ef37bbf6ecf88173ca7574f7_amadey_elex_glassworm_luca-stealer_njrat_smoke-loader
Size 4.0MB
Sample261015-styfbsxyht
SHA256 b1315a9f42df66dca450d3f180a83f492e33b467f6615d5669459125d45ca29c
MD5 3e5ac520ef37bbf6ecf88173ca7574f7
SHA1 a575fe289a7640184e52c1fef574700ed68f0d69
SHA512 15ba92d5e0e635f99f50d4bcb527b6e95476132814467c03c3c9f73ed189f6b5a874ac299f58f46c45d7ae78b823dfa91d69f237790f0dd976c791cdfd0254df
SSDEEP 49152:6uxNdDb608psPA/HjydLS8VOJF0OXFz9wvJpGVb:6ux37csKHjydNgFVrwvJpG
TLSH
T1B216CFB2ED43C062F2930CFB437596651A1D6124E3AA6BF77AB001DB52940D32EFB785
MD5 SHA1 SHA512 SSDEEP TLSH

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
2026-10-13_3e5ac520ef37bbf6ecf88173ca7574f7_amadey_elex_glassworm_luca-stealer_njrat_smoke-loader

File Explorer

2026-10-13_3e5ac520ef37bbf6ecf88173ca7574f7_amadey_elex_glassworm_luca-stealer_njrat_smoke-loader

.exe 4.0MB

2026-10-13_3e5ac520ef37bbf6ecf88173ca7574f7_amadey_elex_glassworm_luca-stealer_njrat_smoke-loader

IMPHASH 3159efde2a0011f9cb53d01f27dd4731
SHA256 b1315a9f42df66dca450d3f180a83f492e33b467f6615d5669459125d45ca29c
MD5 3e5ac520ef37bbf6ecf88173ca7574f7
SHA1 a575fe289a7640184e52c1fef574700ed68f0d69
SHA512 15ba92d5e0e635f99f50d4bcb527b6e95476132814467c03c3c9f73ed189f6b5a874ac299f58f46c45d7ae78b823dfa91d69f237790f0dd976c791cdfd0254df
SSDEEP 49152:6uxNdDb608psPA/HjydLS8VOJF0OXFz9wvJpGVb:6ux37csKHjydNgFVrwvJpG
TLSH
T1B216CFB2ED43C062F2930CFB437596651A1D6124E3AA6BF77AB001DB52940D32EFB785
MD5 SHA1 SHA512 SSDEEP TLSH

windows:4 windows x86 arch:x86

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

0

Major OS version

4

Entry point

10317

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LINE_NUMS_STRIPPED IMAGE_FILE_32BIT_MACHINE

PDB paths

kernel32

GetCurrentThreadId GetCurrentProcessId GetSystemTimeAsFileTime GetModuleHandleW QueryPerformanceCounter CloseHandle TerminateProcess FreeLibrary WideCharToMultiByte SetLastError HeapAlloc LocalFree LeaveCriticalSection WriteFile ExitProcess GetStdHandle IsDebuggerPresent GetCommandLineW FindClose RaiseException SetEvent TlsGetValue GetModuleHandleA GetConsoleMode TlsSetValue LoadLibraryW GetCPInfo GetStringTypeW GetModuleFileNameA InitializeCriticalSectionAndSpinCount FreeEnvironmentStringsW FindNextFileW IsValidCodePage FindFirstFileW DeleteFileW LocalAlloc GetCommandLineA DecodePointer ResetEvent ReleaseMutex GetFileSize EncodePointer LoadLibraryA LoadResource UnmapViewOfFile GetExitCodeProcess ExpandEnvironmentStringsW

user32

DispatchMessageW ShowWindow DestroyWindow ReleaseDC DefWindowProcW MessageBoxW CreateWindowExW GetWindowLongW GetMessageW GetSystemMetrics PostMessageW SendMessageW GetClientRect SetWindowPos EnableWindow LoadCursorW GetParent EndDialog SetTimer LoadIconW SetFocus SetForegroundWindow GetSysColor BeginPaint ScreenToClient KillTimer InvalidateRect EnableMenuItem GetWindow GetWindowTextW SystemParametersInfoW GetKeyState MessageBoxA

Sharing

General

Malware Config

Signatures

File Explorer

2026-10-13_3e5ac520ef37bbf6ecf88173ca7574f7_amadey_elex_glassworm_luca-stealer_njrat_smoke-loader

kernel32

user32

generic