2026-10-16_5a05092e5b8e342fa82f18779d7ba37c_amadey_elex_glassworm_luca-stealer_njrat_smoke-loader

General

Target
2026-10-16_5a05092e5b8e342fa82f18779d7ba37c_amadey_elex_glassworm_luca-stealer_njrat_smoke-loader
Size 4.0MB
Sample261017-vbvb3awyes
SHA256 fb9c61eb01d00342977dea626e4183b87c47417d756e56b3a41795901fab7120
MD5 5a05092e5b8e342fa82f18779d7ba37c
SHA1 9ff7ea14145869610a11b35467cde2f4af17e7b0
SHA512 87dc634af42117e70cf21faf5a7d102a96d4caf4bb15afa1c4432e0dd94a5977452e36155e540d3091247249a03b5f59566d6509f0d7900cdbc5a580eaa36e14
SSDEEP 98304:kVrwvJpGkhJvJD2mLv/erJky3x0NdglPMRSGk:kOLvEmvry3OgZMRSGk
TLSH
T1B21612F078C1D076E5B204BB91BF86BAAB2D2533D3695CC7639401B65B600C5AF3E663
MD5 SHA1 SHA512 SSDEEP TLSH

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
2026-10-16_5a05092e5b8e342fa82f18779d7ba37c_amadey_elex_glassworm_luca-stealer_njrat_smoke-loader

File Explorer

2026-10-16_5a05092e5b8e342fa82f18779d7ba37c_amadey_elex_glassworm_luca-stealer_njrat_smoke-loader

.exe 4.0MB

2026-10-16_5a05092e5b8e342fa82f18779d7ba37c_amadey_elex_glassworm_luca-stealer_njrat_smoke-loader

IMPHASH a97724486a9a308b8f1c7d59a21e4ec5
SHA256 fb9c61eb01d00342977dea626e4183b87c47417d756e56b3a41795901fab7120
MD5 5a05092e5b8e342fa82f18779d7ba37c
SHA1 9ff7ea14145869610a11b35467cde2f4af17e7b0
SHA512 87dc634af42117e70cf21faf5a7d102a96d4caf4bb15afa1c4432e0dd94a5977452e36155e540d3091247249a03b5f59566d6509f0d7900cdbc5a580eaa36e14
SSDEEP 98304:kVrwvJpGkhJvJD2mLv/erJky3x0NdglPMRSGk:kOLvEmvry3OgZMRSGk
TLSH
T1B21612F078C1D076E5B204BB91BF86BAAB2D2533D3695CC7639401B65B600C5AF3E663
MD5 SHA1 SHA512 SSDEEP TLSH

windows:4 windows x86 arch:x86

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

0

Major OS version

4

Entry point

4182321

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LINE_NUMS_STRIPPED IMAGE_FILE_32BIT_MACHINE

PDB paths

kernel32

GetLastError GetCurrentProcess GetCurrentProcessId GetSystemTimeAsFileTime MultiByteToWideChar WideCharToMultiByte SetLastError HeapFree HeapAlloc LocalFree DeleteCriticalSection LeaveCriticalSection WriteFile CreateFileW ExitProcess FindClose SetEvent GetFileType TlsGetValue InitializeCriticalSection HeapReAlloc GetConsoleMode FlushFileBuffers TlsAlloc HeapSetInformation HeapSize WriteConsoleW CreateThread GetCPInfo TlsFree SetFilePointer GetFileAttributesW CompareStringW GetStringTypeW LCMapStringW GetModuleFileNameA InitializeCriticalSectionAndSpinCount GetOEMCP FindNextFileW IsValidCodePage FindFirstFileW GetConsoleCP GetCommandLineA SetEndOfFile ResetEvent GetVersionExW CreateFileA OutputDebugStringW VirtualFree lstrlenW LoadLibraryA GetModuleHandleExW CreateDirectoryW ExpandEnvironmentStringsW

user32

TranslateMessage LoadStringW ShowWindow ReleaseDC PostQuitMessage SetWindowLongW GetWindowLongW GetMessageW GetDlgItem GetSystemMetrics PostMessageW SendMessageW SetWindowPos EndDialog SetWindowTextW LoadIconW SetFocus PeekMessageW EndPaint BeginPaint RegisterClassW GetWindowTextW UpdateWindow SystemParametersInfoW GetKeyState MessageBoxA CharUpperW ClientToScreen

Sharing

General

Malware Config

Signatures

File Explorer

2026-10-16_5a05092e5b8e342fa82f18779d7ba37c_amadey_elex_glassworm_luca-stealer_njrat_smoke-loader

kernel32

user32

generic