2026-10-16_19f828db7376010be51fe4f2bf6a6017_amadey_elex_glassworm_luca-stealer_njrat_smoke-loader

General

Target
2026-10-16_19f828db7376010be51fe4f2bf6a6017_amadey_elex_glassworm_luca-stealer_njrat_smoke-loader
Size 4.0MB
Sample261017-2pmbya1thv
SHA256 6481698d3f4fa06141cc7e09cd26406c76ff95d3c2ecbb4850e834acdea5a00a
MD5 19f828db7376010be51fe4f2bf6a6017
SHA1 cae29fcff1927bd976ec917b41eaa80e13a1060e
SHA512 dc3a60bea41406d3b78fbe468c0cb5f6e3ac308b70bd3aed21a14c5e0ec5933e68f8b0941c4830be49d23b14551bc61a8c94989bca326250e05e7f64a9251161
SSDEEP 98304:yGquIwEI0x8iqKqua1lxu7G92p3czYhBXMP9imhIBll1foOLmhoVMzwy3YKZgWH8:yhP9QQ9
TLSH
T1EA16DFA1B5B18DB3E2B10DB9976BBA655F2C95312330D0C7639810E15EE78F3E23458E
MD5 SHA1 SHA512 SSDEEP TLSH

Score

3^/10

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
2026-10-16_19f828db7376010be51fe4f2bf6a6017_amadey_elex_glassworm_luca-stealer_njrat_smoke-loader

2026-10-16_19f828db7376010be51fe4f2bf6a6017_amadey_elex_glassworm_luca-stealer_njrat_smoke-loader

.exe 4.0MB

IMPHASH 20de1cbc7ecf3ed3e4b9a8bb5ab6b977
SHA256 6481698d3f4fa06141cc7e09cd26406c76ff95d3c2ecbb4850e834acdea5a00a
MD5 19f828db7376010be51fe4f2bf6a6017
SHA1 cae29fcff1927bd976ec917b41eaa80e13a1060e
SHA512 dc3a60bea41406d3b78fbe468c0cb5f6e3ac308b70bd3aed21a14c5e0ec5933e68f8b0941c4830be49d23b14551bc61a8c94989bca326250e05e7f64a9251161
SSDEEP 98304:yGquIwEI0x8iqKqua1lxu7G92p3czYhBXMP9imhIBll1foOLmhoVMzwy3YKZgWH8:yhP9QQ9
TLSH
T1EA16DFA1B5B18DB3E2B10DB9976BBA655F2C95312330D0C7639810E15EE78F3E23458E
MD5 SHA1 SHA512 SSDEEP TLSH

Minor OS version

0

Major OS version

4

Entry point

4175118

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LINE_NUMS_STRIPPED IMAGE_FILE_32BIT_MACHINE

PDB paths