2026-10-22_f84552ed26b6c6877f17c9827554d124_amadey_elex_glassworm_luca-stealer_njrat_smoke-loader

General

Target
2026-10-22_f84552ed26b6c6877f17c9827554d124_amadey_elex_glassworm_luca-stealer_njrat_smoke-loader
Size 4.0MB
Sample261023-btql2sca68
SHA256 6399b46bb7a1f2b66694bcce8c438c299a267916b35ea1e208df8686d20b8775
MD5 f84552ed26b6c6877f17c9827554d124
SHA1 30cce42f1fb7ba1061e2c3ab11962dc3b39608e4
SHA512 05d27de0f8fe7afdc1ba6b9fb7ad982a1cf54f8c962d9b3ae7e7288402b3cbc48b2e64b4e9a3fab6f13783cc1afab8304ac7f05d4ba4e7103ae3eeca8a164d98
SSDEEP 49152:mhAqlwyGKNLSfbLnG8QnKkS0OXFz9wvJpGVb:mhAqlrGrz2nKlVrwvJpG
TLSH
T10716BED0BB31836FEDC3007445E95B231BA8F1A0171D77CBA6C825A255A05CFF63AE5A
MD5 SHA1 SHA512 SSDEEP TLSH

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
2026-10-22_f84552ed26b6c6877f17c9827554d124_amadey_elex_glassworm_luca-stealer_njrat_smoke-loader

File Explorer

2026-10-22_f84552ed26b6c6877f17c9827554d124_amadey_elex_glassworm_luca-stealer_njrat_smoke-loader

.exe 4.0MB

2026-10-22_f84552ed26b6c6877f17c9827554d124_amadey_elex_glassworm_luca-stealer_njrat_smoke-loader

IMPHASH 3b29ceb10413a0f09faf02edd4cd67f7
SHA256 6399b46bb7a1f2b66694bcce8c438c299a267916b35ea1e208df8686d20b8775
MD5 f84552ed26b6c6877f17c9827554d124
SHA1 30cce42f1fb7ba1061e2c3ab11962dc3b39608e4
SHA512 05d27de0f8fe7afdc1ba6b9fb7ad982a1cf54f8c962d9b3ae7e7288402b3cbc48b2e64b4e9a3fab6f13783cc1afab8304ac7f05d4ba4e7103ae3eeca8a164d98
SSDEEP 49152:mhAqlwyGKNLSfbLnG8QnKkS0OXFz9wvJpGVb:mhAqlrGrz2nKlVrwvJpG
TLSH
T10716BED0BB31836FEDC3007445E95B231BA8F1A0171D77CBA6C825A255A05CFF63AE5A
MD5 SHA1 SHA512 SSDEEP TLSH

windows:4 windows x86 arch:x86

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

0

Major OS version

4

Entry point

4176581

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LINE_NUMS_STRIPPED IMAGE_FILE_32BIT_MACHINE

PDB paths

kernel32

GetCurrentProcess GetCurrentProcessId GetSystemTimeAsFileTime SetUnhandledExceptionFilter GetProcAddress CloseHandle UnhandledExceptionFilter GetTickCount WideCharToMultiByte SetLastError HeapAlloc LocalFree DeleteCriticalSection EnterCriticalSection WriteFile WaitForSingleObject GetProcessHeap GetModuleFileNameW GetStdHandle IsDebuggerPresent FindClose FormatMessageW TlsGetValue GetModuleHandleA HeapReAlloc GetConsoleMode FlushFileBuffers CreateEventW HeapSetInformation HeapSize WriteConsoleW LoadLibraryExW TlsFree GetFileAttributesW GetStringTypeW RtlUnwind LCMapStringW GetModuleFileNameA InitializeCriticalSectionAndSpinCount GetOEMCP IsProcessorFeaturePresent IsValidCodePage VirtualAlloc DecodePointer SetEndOfFile VirtualFree lstrlenW GetModuleHandleExW CreateDirectoryW GetFullPathNameW LoadResource ExpandEnvironmentStringsW

user32

TranslateMessage DispatchMessageW ReleaseDC PostQuitMessage CreateWindowExW SetWindowLongW GetWindowLongW GetMessageW GetDlgItem GetDC GetClientRect SetWindowPos IsWindow LoadCursorW EndDialog SetTimer SetFocus GetSysColor PeekMessageW BeginPaint SetCursor KillTimer RegisterClassW GetWindowTextW SystemParametersInfoW GetKeyState MessageBoxA ClientToScreen

Sharing

General

Malware Config

Signatures

File Explorer

2026-10-22_f84552ed26b6c6877f17c9827554d124_amadey_elex_glassworm_luca-stealer_njrat_smoke-loader

kernel32

user32

generic