2026-10-15_087ac40914dc68cdf179d6961cbba2fc_amadey_elex_glassworm_luca-stealer_njrat_smoke-loader

General

Target
2026-10-15_087ac40914dc68cdf179d6961cbba2fc_amadey_elex_glassworm_luca-stealer_njrat_smoke-loader
Size 4.0MB
Sample261016-3wj1tscb65
SHA256 8252e3b8f1a679af7e9a4ea949d92b4221d81bb49af234c4757c009e7060980f
MD5 087ac40914dc68cdf179d6961cbba2fc
SHA1 45b82fdd1907be5e2075e28d75578ebd92e7685d
SHA512 34f4fba88a54694c4c74ebba8ede2a95b2f95074fcedde9e9aad3eb301ee8c0a34ee5f20ab58b287c6a1f3ba6b7d2041a17fe983b1d47701838c148558573951
SSDEEP 49152:b0OXFz9wvJpGVbijNTxtDZT/g0E3IHVGsfN2q1ZctRyiyHrXdJQUQgGq/6UxLEY8:bVrwvJpGcpTSYcslbHBAWGqrtEYPLyH
TLSH
T19B16136DBE038233F3E6007991B696B7BB3C75316725B1DB5F803C652EA04D22738A56
MD5 SHA1 SHA512 SSDEEP TLSH

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
2026-10-15_087ac40914dc68cdf179d6961cbba2fc_amadey_elex_glassworm_luca-stealer_njrat_smoke-loader

File Explorer

2026-10-15_087ac40914dc68cdf179d6961cbba2fc_amadey_elex_glassworm_luca-stealer_njrat_smoke-loader

.exe 4.0MB

2026-10-15_087ac40914dc68cdf179d6961cbba2fc_amadey_elex_glassworm_luca-stealer_njrat_smoke-loader

IMPHASH 8ee3c12b1f4cb2bc2ea8cc9643d61202
SHA256 8252e3b8f1a679af7e9a4ea949d92b4221d81bb49af234c4757c009e7060980f
MD5 087ac40914dc68cdf179d6961cbba2fc
SHA1 45b82fdd1907be5e2075e28d75578ebd92e7685d
SHA512 34f4fba88a54694c4c74ebba8ede2a95b2f95074fcedde9e9aad3eb301ee8c0a34ee5f20ab58b287c6a1f3ba6b7d2041a17fe983b1d47701838c148558573951
SSDEEP 49152:b0OXFz9wvJpGVbijNTxtDZT/g0E3IHVGsfN2q1ZctRyiyHrXdJQUQgGq/6UxLEY8:bVrwvJpGcpTSYcslbHBAWGqrtEYPLyH
TLSH
T19B16136DBE038233F3E6007991B696B7BB3C75316725B1DB5F803C652EA04D22738A56
MD5 SHA1 SHA512 SSDEEP TLSH

windows:4 windows x86 arch:x86

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

0

Major OS version

4

Entry point

9259

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LINE_NUMS_STRIPPED IMAGE_FILE_32BIT_MACHINE

PDB paths

kernel32

GetCurrentProcess GetSystemTimeAsFileTime SetUnhandledExceptionFilter CloseHandle Sleep WideCharToMultiByte SetLastError HeapFree HeapAlloc LeaveCriticalSection EnterCriticalSection WaitForSingleObject GetProcessHeap CreateFileW GetStdHandle GetStartupInfoW IsDebuggerPresent GetCommandLineW FindClose SetEvent GetACP FormatMessageW InitializeCriticalSection HeapReAlloc CreateEventW HeapSetInformation LoadLibraryW LoadLibraryExW SetFilePointer GetFileAttributesW GetStringTypeW GetModuleFileNameA GetEnvironmentStringsW IsProcessorFeaturePresent FindNextFileW IsValidCodePage DeleteFileW GetConsoleCP LocalAlloc DecodePointer SetEndOfFile ReleaseMutex CreateFileA OutputDebugStringW GetFileSize EncodePointer lstrlenW GetModuleHandleExW GetLocaleInfoW CreateDirectoryW GetFullPathNameW LoadResource GetExitCodeProcess

user32

LoadStringW DispatchMessageW ReleaseDC MessageBoxW PostQuitMessage CreateWindowExW GetDlgItem GetSystemMetrics GetWindowRect SendMessageW GetClientRect LoadCursorW SetWindowTextW SetTimer SetForegroundWindow GetSysColor PeekMessageW EndPaint BeginPaint ScreenToClient KillTimer RegisterClassW EnableMenuItem GetWindow GetWindowTextW MessageBoxA ClientToScreen

Sharing

General

Malware Config

Signatures

File Explorer

2026-10-15_087ac40914dc68cdf179d6961cbba2fc_amadey_elex_glassworm_luca-stealer_njrat_smoke-loader

kernel32

user32

generic