2026-10-22_d27e3f6e71e2ab8f8414bd16e9491d97_amadey_elex_glassworm_luca-stealer_njrat_smoke-loader

General

Target
2026-10-22_d27e3f6e71e2ab8f8414bd16e9491d97_amadey_elex_glassworm_luca-stealer_njrat_smoke-loader
Size 4.0MB
Sample261023-x219eadd97
SHA256 3e09776905ee880a2b97ec6e58958c7725525df70c03d087446c312679f9abb6
MD5 d27e3f6e71e2ab8f8414bd16e9491d97
SHA1 86a40f2512ac52bc302ea685477d04468fbe9a1e
SHA512 41a33fd09b07a079ac56ffb9ea271893fc5fdc211fa19a65fd30977f4d4840b69ac2c566dee71a53c5705166ca05f017cad80af45a39f42ca195c11022a770f6
SSDEEP 49152:xt8EeQpiKPXkX/7PdZWI9U0rLgUM69LALRiTCNE+yPCtMqYIUBNrKotFPpsSzeUs:zllVQ52aeIPCCqRQtKmF/eUqVrwvJpG
TLSH
T18C161219E8408D72F3A2313650BA8FF75DA91E663325A3CB93DD04A75E310CA7732796
MD5 SHA1 SHA512 SSDEEP TLSH

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
2026-10-22_d27e3f6e71e2ab8f8414bd16e9491d97_amadey_elex_glassworm_luca-stealer_njrat_smoke-loader

File Explorer

2026-10-22_d27e3f6e71e2ab8f8414bd16e9491d97_amadey_elex_glassworm_luca-stealer_njrat_smoke-loader

.exe 4.0MB

2026-10-22_d27e3f6e71e2ab8f8414bd16e9491d97_amadey_elex_glassworm_luca-stealer_njrat_smoke-loader

IMPHASH 51d984b6c1f1a06e565b2c2ff7f0837a
SHA256 3e09776905ee880a2b97ec6e58958c7725525df70c03d087446c312679f9abb6
MD5 d27e3f6e71e2ab8f8414bd16e9491d97
SHA1 86a40f2512ac52bc302ea685477d04468fbe9a1e
SHA512 41a33fd09b07a079ac56ffb9ea271893fc5fdc211fa19a65fd30977f4d4840b69ac2c566dee71a53c5705166ca05f017cad80af45a39f42ca195c11022a770f6
SSDEEP 49152:xt8EeQpiKPXkX/7PdZWI9U0rLgUM69LALRiTCNE+yPCtMqYIUBNrKotFPpsSzeUs:zllVQ52aeIPCCqRQtKmF/eUqVrwvJpG
TLSH
T18C161219E8408D72F3A2313650BA8FF75DA91E663325A3CB93DD04A75E310CA7732796
MD5 SHA1 SHA512 SSDEEP TLSH

windows:4 windows x86 arch:x86

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

0

Major OS version

4

Entry point

7123

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LINE_NUMS_STRIPPED IMAGE_FILE_32BIT_MACHINE

PDB paths

kernel32

GetLastError GetCurrentThreadId GetCurrentProcess GetCurrentProcessId GetSystemTimeAsFileTime SetUnhandledExceptionFilter GetModuleHandleW QueryPerformanceCounter CloseHandle TerminateProcess UnhandledExceptionFilter GetTickCount FreeLibrary WideCharToMultiByte HeapFree LocalFree LeaveCriticalSection WaitForSingleObject GetProcessHeap ExitProcess GetStdHandle RaiseException SetEvent GetACP FormatMessageW GetFileType TlsGetValue InitializeCriticalSection HeapReAlloc FlushFileBuffers HeapSetInformation LoadLibraryW SetFilePointer GetStringTypeW RtlUnwind LCMapStringW GetModuleFileNameA InitializeCriticalSectionAndSpinCount SetStdHandle IsProcessorFeaturePresent FindFirstFileW DeleteFileW LocalAlloc GetCommandLineA DecodePointer GetVersionExW ReleaseMutex CreateFileA GetFileSize lstrlenW GetModuleHandleExW GetLocaleInfoW CreateDirectoryW GetFullPathNameW LoadResource UnmapViewOfFile ExpandEnvironmentStringsW CreateProcessW

user32

TranslateMessage ShowWindow DestroyWindow DefWindowProcW PostQuitMessage SetWindowLongW GetWindowLongW GetSystemMetrics GetWindowRect PostMessageW SetWindowPos EnableWindow IsWindow GetParent EndDialog SetTimer LoadIconW SetFocus SetForegroundWindow GetSysColor EndPaint RegisterClassW EnableMenuItem GetWindowTextW UpdateWindow GetKeyState ClientToScreen

Sharing

General

Malware Config

Signatures

File Explorer

2026-10-22_d27e3f6e71e2ab8f8414bd16e9491d97_amadey_elex_glassworm_luca-stealer_njrat_smoke-loader

kernel32

user32

generic