2026-10-16_cdeaff413715e48ea368f389b3b54924_amadey_elex_glassworm_luca-stealer_njrat_smoke-loader

General

Target
2026-10-16_cdeaff413715e48ea368f389b3b54924_amadey_elex_glassworm_luca-stealer_njrat_smoke-loader
Size 4.0MB
Sample261017-hdde4sysgv
SHA256 dfd5fc64c3c22c06ded5fd981b367dfdc7c3ee91020e48411f31f639a4fb6b91
MD5 cdeaff413715e48ea368f389b3b54924
SHA1 7e5f2f0d8053f4d5b2481e3a0995d652b000c290
SHA512 860298ff34afe154f2833ca0ae71e7ee85b0f89af6a20974972ee97b6835df2cf6677322a51e114c84ef95e596a2eb04381e70620474570457305e74c7cc0d15
SSDEEP 49152:T0OXFz9wvJpGVbkBWAUpZXuFp74uA1Wr4DNEQj:TVrwvJpGeBWAsXC1VAoENEQ
TLSH
T13C16BE7367824062DDEE803655765AAEFEE85530A3239CD35ED030BA8B6CCD12737936
MD5 SHA1 SHA512 SSDEEP TLSH

Score

3^/10

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
2026-10-16_cdeaff413715e48ea368f389b3b54924_amadey_elex_glassworm_luca-stealer_njrat_smoke-loader

2026-10-16_cdeaff413715e48ea368f389b3b54924_amadey_elex_glassworm_luca-stealer_njrat_smoke-loader

.exe 4.0MB

IMPHASH 5f34e8cf94848a0f92b1ff7e02b47d30
SHA256 dfd5fc64c3c22c06ded5fd981b367dfdc7c3ee91020e48411f31f639a4fb6b91
MD5 cdeaff413715e48ea368f389b3b54924
SHA1 7e5f2f0d8053f4d5b2481e3a0995d652b000c290
SHA512 860298ff34afe154f2833ca0ae71e7ee85b0f89af6a20974972ee97b6835df2cf6677322a51e114c84ef95e596a2eb04381e70620474570457305e74c7cc0d15
SSDEEP 49152:T0OXFz9wvJpGVbkBWAUpZXuFp74uA1Wr4DNEQj:TVrwvJpGeBWAsXC1VAoENEQ
TLSH
T13C16BE7367824062DDEE803655765AAEFEE85530A3239CD35ED030BA8B6CCD12737936
MD5 SHA1 SHA512 SSDEEP TLSH

Minor OS version

0

Major OS version

4

Entry point

634240

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LINE_NUMS_STRIPPED IMAGE_FILE_32BIT_MACHINE

PDB paths