2026-10-19_3801eae330d9cd2cf6a76140112d5dd4_amadey_elex_glassworm_luca-stealer_njrat_smoke-loader

General

Target
2026-10-19_3801eae330d9cd2cf6a76140112d5dd4_amadey_elex_glassworm_luca-stealer_njrat_smoke-loader
Size 4.0MB
Sample261020-3c23asdf44
SHA256 72003b9c98582e867297555df050ee09a8d2c93a4f38d1c17436b8636d963d8d
MD5 3801eae330d9cd2cf6a76140112d5dd4
SHA1 8f228cb2f40bfb0ccd540ab05e2af3bf86052ee1
SHA512 d6a8d1673f0d4d1db2702614e73a4aa209d008cd19468faef851967fb7b585b972952348fb977796144f3535b09a1c0875e9fca0f3f1f818ca752fd3816ad6cd
SSDEEP 49152:P0OXFz9wvJpGVb6RSxQ+xcAJqfZSVZA7a1iJr8cRglT1rpO:PVrwvJpG3QtAUfZSVZA7cW8cRg1rc
TLSH
T1AB16CF26E8024063F1B1D0FE937D56661A38A126C31670C71E83E8E5E668EDF73F5B85
MD5 SHA1 SHA512 SSDEEP TLSH

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
2026-10-19_3801eae330d9cd2cf6a76140112d5dd4_amadey_elex_glassworm_luca-stealer_njrat_smoke-loader

File Explorer

2026-10-19_3801eae330d9cd2cf6a76140112d5dd4_amadey_elex_glassworm_luca-stealer_njrat_smoke-loader

.exe 4.0MB

2026-10-19_3801eae330d9cd2cf6a76140112d5dd4_amadey_elex_glassworm_luca-stealer_njrat_smoke-loader

IMPHASH 5c7e5953a9dff0a1c7065e3e4c268dfe
SHA256 72003b9c98582e867297555df050ee09a8d2c93a4f38d1c17436b8636d963d8d
MD5 3801eae330d9cd2cf6a76140112d5dd4
SHA1 8f228cb2f40bfb0ccd540ab05e2af3bf86052ee1
SHA512 d6a8d1673f0d4d1db2702614e73a4aa209d008cd19468faef851967fb7b585b972952348fb977796144f3535b09a1c0875e9fca0f3f1f818ca752fd3816ad6cd
SSDEEP 49152:P0OXFz9wvJpGVb6RSxQ+xcAJqfZSVZA7a1iJr8cRglT1rpO:PVrwvJpG3QtAUfZSVZA7cW8cRg1rc
TLSH
T1AB16CF26E8024063F1B1D0FE937D56661A38A126C31670C71E83E8E5E668EDF73F5B85
MD5 SHA1 SHA512 SSDEEP TLSH

windows:4 windows x86 arch:x86

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

0

Major OS version

4

Entry point

4179945

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LINE_NUMS_STRIPPED IMAGE_FILE_32BIT_MACHINE

PDB paths

kernel32

GetCurrentProcess GetSystemTimeAsFileTime SetUnhandledExceptionFilter GetModuleHandleW CloseHandle TerminateProcess UnhandledExceptionFilter HeapAlloc DeleteCriticalSection LeaveCriticalSection EnterCriticalSection WriteFile GetProcessHeap CreateFileW ExitProcess GetModuleFileNameW IsDebuggerPresent GetCommandLineW FindClose ReadFile SetEvent FormatMessageW GetFileType InitializeCriticalSection HeapReAlloc HeapSize WriteConsoleW TlsFree SetFilePointer CompareStringW GetOEMCP GetEnvironmentStringsW SetStdHandle FindNextFileW IsValidCodePage GetCommandLineA DecodePointer SetEndOfFile ResetEvent ReleaseMutex OutputDebugStringW GetFileSize VirtualFree GetModuleHandleExW GetLocaleInfoW CreateDirectoryW LoadResource UnmapViewOfFile GetExitCodeProcess CreateProcessW

user32

LoadStringW DestroyWindow ReleaseDC MessageBoxW PostQuitMessage GetWindowLongW GetMessageW GetDlgItem GetSystemMetrics GetClientRect SetWindowPos EnableWindow IsWindow LoadCursorW GetParent EndDialog LoadIconW SetForegroundWindow GetSysColor ScreenToClient SetCursor InvalidateRect SystemParametersInfoW MessageBoxA ClientToScreen

Sharing

General

Malware Config

Signatures

File Explorer

2026-10-19_3801eae330d9cd2cf6a76140112d5dd4_amadey_elex_glassworm_luca-stealer_njrat_smoke-loader

kernel32

user32

generic