2026-10-16_ba85eb13c95ae6f022d07ec8a3269bca_amadey_elex_glassworm_luca-stealer_njrat_smoke-loader

General

Target
2026-10-16_ba85eb13c95ae6f022d07ec8a3269bca_amadey_elex_glassworm_luca-stealer_njrat_smoke-loader
Size 4.0MB
Sample261017-j61lsaws3r
SHA256 d153ed20a3da30e018380a7eea54271b7b187868f692249b3a06ff4e05e841a8
MD5 ba85eb13c95ae6f022d07ec8a3269bca
SHA1 efb600f2dfc7649b8df869947f42af2fad695c25
SHA512 c6775f1715041cbd2dd828f03e9e9521eee79977bed9e2d7562c8c0182fd2c86edc21fa2be7a3869347554df5f53dde5ead99abb874cf6e0902b1c1ed17b08b4
SSDEEP 24576:zyA0tUXF2K2iMMfwoiJpGVFpoZIyBkZskR2/agc+Y6n8i+Q1LwT:zb0OXFz9wvJpGVbKIyOROYgtJw
TLSH
T17516CF2CB83D93AFF3E23A7D9CA9A6724A3D6533171460E3539030E45A63CE1B935746
MD5 SHA1 SHA512 SSDEEP TLSH

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
2026-10-16_ba85eb13c95ae6f022d07ec8a3269bca_amadey_elex_glassworm_luca-stealer_njrat_smoke-loader

File Explorer

2026-10-16_ba85eb13c95ae6f022d07ec8a3269bca_amadey_elex_glassworm_luca-stealer_njrat_smoke-loader

.exe 4.0MB

2026-10-16_ba85eb13c95ae6f022d07ec8a3269bca_amadey_elex_glassworm_luca-stealer_njrat_smoke-loader

IMPHASH 02119fb6ed69644f0d3626aa9538c927
SHA256 d153ed20a3da30e018380a7eea54271b7b187868f692249b3a06ff4e05e841a8
MD5 ba85eb13c95ae6f022d07ec8a3269bca
SHA1 efb600f2dfc7649b8df869947f42af2fad695c25
SHA512 c6775f1715041cbd2dd828f03e9e9521eee79977bed9e2d7562c8c0182fd2c86edc21fa2be7a3869347554df5f53dde5ead99abb874cf6e0902b1c1ed17b08b4
SSDEEP 24576:zyA0tUXF2K2iMMfwoiJpGVFpoZIyBkZskR2/agc+Y6n8i+Q1LwT:zb0OXFz9wvJpGVbKIyOROYgtJw
TLSH
T17516CF2CB83D93AFF3E23A7D9CA9A6724A3D6533171460E3539030E45A63CE1B935746
MD5 SHA1 SHA512 SSDEEP TLSH

windows:4 windows x86 arch:x86

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

0

Major OS version

4

Entry point

7068

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LINE_NUMS_STRIPPED IMAGE_FILE_32BIT_MACHINE

PDB paths

kernel32

GetCurrentProcess GetCurrentProcessId GetSystemTimeAsFileTime GetProcAddress CloseHandle GetTickCount WideCharToMultiByte HeapAlloc DeleteCriticalSection WaitForSingleObject CreateFileW GetStartupInfoW IsDebuggerPresent ReadFile GetFileType GetModuleHandleA InitializeCriticalSection GetConsoleMode TlsSetValue CreateEventW HeapSize LoadLibraryW CreateThread GetCPInfo SetFilePointer GetFileAttributesW CompareStringW GetStringTypeW RtlUnwind LCMapStringW GetEnvironmentStringsW SetStdHandle IsProcessorFeaturePresent FindNextFileW IsValidCodePage FindFirstFileW DeleteFileW GetConsoleCP LocalAlloc GetCommandLineA SetEndOfFile GetVersionExW CreateFileA OutputDebugStringW GetModuleHandleExW GetLocaleInfoW CreateDirectoryW GetFullPathNameW GetExitCodeProcess ExpandEnvironmentStringsW

user32

TranslateMessage DispatchMessageW ShowWindow DestroyWindow CreateWindowExW GetWindowLongW GetMessageW GetSystemMetrics GetDC PostMessageW GetClientRect SetWindowPos GetParent EndDialog SetWindowTextW SetTimer SetForegroundWindow GetSysColor PeekMessageW ScreenToClient SetCursor RegisterClassW EnableMenuItem GetWindow GetWindowTextW CharUpperW ClientToScreen

Sharing

General

Malware Config

Signatures

File Explorer

2026-10-16_ba85eb13c95ae6f022d07ec8a3269bca_amadey_elex_glassworm_luca-stealer_njrat_smoke-loader

kernel32

user32

generic