2026-10-13_2a0c8d4179cb9bf28efa5272d9b8718a_amadey_elex_glassworm_luca-stealer_njrat_smoke-loader

General

Target
2026-10-13_2a0c8d4179cb9bf28efa5272d9b8718a_amadey_elex_glassworm_luca-stealer_njrat_smoke-loader
Size 4.0MB
Sample261015-vv7rhaaz3l
SHA256 178062457a4e1657f796b0f54c314eef143c66e8b4be8a4f6a3c89c4c7cfe1ac
MD5 2a0c8d4179cb9bf28efa5272d9b8718a
SHA1 a5caf07bdc0fb40d3e8844fcb15185c3386a6a8e
SHA512 8ac760991dbb08539e36f08c8bbf4e31e7c1200d6fb565218b66e29a00484bbab3d18658dcc718db55657a9f70829807706a6fe3ae82ea6fac9b87fc4af04aa8
SSDEEP 98304:1/3XzJV7KLUyUd/pa/v0YIoWocxhXMxWNeQCm0VrwvJpG:BtV7KLUyUd/pa/v0YIv/x2kNe+0
TLSH
T1B8161291FC819032E1E5067CA4B79BBF5E3CA562F76C88C7578084A5CDA44F1623ABC7
MD5 SHA1 SHA512 SSDEEP TLSH

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
2026-10-13_2a0c8d4179cb9bf28efa5272d9b8718a_amadey_elex_glassworm_luca-stealer_njrat_smoke-loader

File Explorer

2026-10-13_2a0c8d4179cb9bf28efa5272d9b8718a_amadey_elex_glassworm_luca-stealer_njrat_smoke-loader

.exe 4.0MB

2026-10-13_2a0c8d4179cb9bf28efa5272d9b8718a_amadey_elex_glassworm_luca-stealer_njrat_smoke-loader

IMPHASH 26ac0ae3ae46a35b2c95257f7f90d29e
SHA256 178062457a4e1657f796b0f54c314eef143c66e8b4be8a4f6a3c89c4c7cfe1ac
MD5 2a0c8d4179cb9bf28efa5272d9b8718a
SHA1 a5caf07bdc0fb40d3e8844fcb15185c3386a6a8e
SHA512 8ac760991dbb08539e36f08c8bbf4e31e7c1200d6fb565218b66e29a00484bbab3d18658dcc718db55657a9f70829807706a6fe3ae82ea6fac9b87fc4af04aa8
SSDEEP 98304:1/3XzJV7KLUyUd/pa/v0YIoWocxhXMxWNeQCm0VrwvJpG:BtV7KLUyUd/pa/v0YIv/x2kNe+0
TLSH
T1B8161291FC819032E1E5067CA4B79BBF5E3CA562F76C88C7578084A5CDA44F1623ABC7
MD5 SHA1 SHA512 SSDEEP TLSH

windows:4 windows x86 arch:x86

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

0

Major OS version

4

Entry point

3550972

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LINE_NUMS_STRIPPED IMAGE_FILE_32BIT_MACHINE

PDB paths

kernel32

GetLastError GetCurrentThreadId GetSystemTimeAsFileTime SetUnhandledExceptionFilter GetModuleHandleW QueryPerformanceCounter GetProcAddress CloseHandle TerminateProcess UnhandledExceptionFilter Sleep GetTickCount FreeLibrary HeapFree HeapAlloc LocalFree EnterCriticalSection WriteFile WaitForSingleObject ExitProcess GetStdHandle IsDebuggerPresent FindClose GetACP TlsGetValue FlushFileBuffers TlsAlloc WriteConsoleW LoadLibraryExW TlsFree SetFilePointer GetFileAttributesW GetStringTypeW LCMapStringW GetModuleFileNameA FindNextFileW DeleteFileW GetConsoleCP LocalAlloc DecodePointer SetEndOfFile ResetEvent GetVersionExW ReleaseMutex CreateFileA LoadLibraryA GetLocaleInfoW CreateDirectoryW CreateProcessW

user32

TranslateMessage LoadStringW DispatchMessageW ShowWindow ReleaseDC MessageBoxW CreateWindowExW GetWindowLongW GetMessageW GetDC PostMessageW SendMessageW SetWindowPos EnableWindow IsWindow LoadCursorW EndDialog SetTimer LoadIconW SetFocus GetSysColor KillTimer InvalidateRect EnableMenuItem GetWindowTextW UpdateWindow SystemParametersInfoW GetKeyState CharUpperW

Sharing

General

Malware Config

Signatures

File Explorer

2026-10-13_2a0c8d4179cb9bf28efa5272d9b8718a_amadey_elex_glassworm_luca-stealer_njrat_smoke-loader

kernel32

user32

generic