2026-10-22_2c681c91fa42a6f5053c4ac8dbe4b3de_amadey_elex_glassworm_luca-stealer_njrat_smoke-loader

General

Target
2026-10-22_2c681c91fa42a6f5053c4ac8dbe4b3de_amadey_elex_glassworm_luca-stealer_njrat_smoke-loader
Size 4.0MB
Sample261024-wngr6sfd92
SHA256 23d4614843eaf43e693bf7747c029da5bd519065bc17760dec2bc0fecae4b2d3
MD5 2c681c91fa42a6f5053c4ac8dbe4b3de
SHA1 e4db7559a23417f72860b9f637e52ecb8308bf6f
SHA512 b91ab21922254643c8945e6f855fbbb35b6455bced04ae9dae844470832468c9b995bee3b602a66ab5c15ea7489a74db706304c268e66a4501c4b756c6c8f456
SSDEEP 49152:aChCuQN+AcM3Mz49bsUEnuScRZAhNNob2RmK0OXFz9wvJpGVb:Jb4pR32SCupohNNfUKVrwvJpG
TLSH
T18D16CEA3E87593B2E9DB3735A566CA728D2E15206321C0EB53F334A6C7630F52774E42
MD5 SHA1 SHA512 SSDEEP TLSH

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
2026-10-22_2c681c91fa42a6f5053c4ac8dbe4b3de_amadey_elex_glassworm_luca-stealer_njrat_smoke-loader

File Explorer

2026-10-22_2c681c91fa42a6f5053c4ac8dbe4b3de_amadey_elex_glassworm_luca-stealer_njrat_smoke-loader

.exe 4.0MB

2026-10-22_2c681c91fa42a6f5053c4ac8dbe4b3de_amadey_elex_glassworm_luca-stealer_njrat_smoke-loader

IMPHASH 348b9458cc8bc81039e7aab734f6642b
SHA256 23d4614843eaf43e693bf7747c029da5bd519065bc17760dec2bc0fecae4b2d3
MD5 2c681c91fa42a6f5053c4ac8dbe4b3de
SHA1 e4db7559a23417f72860b9f637e52ecb8308bf6f
SHA512 b91ab21922254643c8945e6f855fbbb35b6455bced04ae9dae844470832468c9b995bee3b602a66ab5c15ea7489a74db706304c268e66a4501c4b756c6c8f456
SSDEEP 49152:aChCuQN+AcM3Mz49bsUEnuScRZAhNNob2RmK0OXFz9wvJpGVb:Jb4pR32SCupohNNfUKVrwvJpG
TLSH
T18D16CEA3E87593B2E9DB3735A566CA728D2E15206321C0EB53F334A6C7630F52774E42
MD5 SHA1 SHA512 SSDEEP TLSH

windows:4 windows x86 arch:x86

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

0

Major OS version

4

Entry point

4183354

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LINE_NUMS_STRIPPED IMAGE_FILE_32BIT_MACHINE

PDB paths

kernel32

GetCurrentThreadId GetCurrentProcess GetSystemTimeAsFileTime GetModuleHandleW QueryPerformanceCounter CloseHandle UnhandledExceptionFilter FreeLibrary SetLastError HeapFree DeleteCriticalSection LeaveCriticalSection EnterCriticalSection GetProcessHeap CreateFileW ExitProcess GetModuleFileNameW GetStdHandle FindClose ReadFile TlsGetValue GetModuleHandleA InitializeCriticalSection HeapReAlloc FlushFileBuffers TlsSetValue TlsAlloc HeapSetInformation HeapSize LoadLibraryW LoadLibraryExW GetCPInfo TlsFree SetFilePointer CompareStringW RtlUnwind GetModuleFileNameA InitializeCriticalSectionAndSpinCount GetOEMCP GetEnvironmentStringsW FreeEnvironmentStringsW FindNextFileW IsValidCodePage DeleteFileW VirtualAlloc ResetEvent ReleaseMutex CreateFileA OutputDebugStringW lstrlenW LoadResource ExpandEnvironmentStringsW CreateProcessW

user32

LoadStringW DestroyWindow DefWindowProcW PostQuitMessage CreateWindowExW SetWindowLongW GetWindowLongW GetMessageW GetDlgItem GetWindowRect SendMessageW SetWindowPos EnableWindow IsWindow EndDialog PeekMessageW EndPaint BeginPaint RegisterClassW EnableMenuItem GetWindow UpdateWindow SystemParametersInfoW MessageBoxA CharUpperW ClientToScreen

Sharing

General

Malware Config

Signatures

File Explorer

2026-10-22_2c681c91fa42a6f5053c4ac8dbe4b3de_amadey_elex_glassworm_luca-stealer_njrat_smoke-loader

kernel32

user32

generic