2026-10-25_ba624782b8100ba811b4f07e10424292_amadey_elex_glassworm_luca-stealer_njrat_smoke-loader

General

Target
2026-10-25_ba624782b8100ba811b4f07e10424292_amadey_elex_glassworm_luca-stealer_njrat_smoke-loader
Size 4.0MB
Sample261026-rvbsaabc63
SHA256 770309c41878f2ecf2a55be6db4b84c5cc4c65893cacc34069e518bc8d5644f3
MD5 ba624782b8100ba811b4f07e10424292
SHA1 ecbc4c5d979d4575c0f48e7f063ed9845d616202
SHA512 b6dc8a66a17a3d3eefb2f595762eab6e446f5b3c8ae90d18015e8179349473de3a8a1b76990f4b05b3a32678d4cc84d48d8af359450cd0c028c4722e4dfcf38e
SSDEEP 98304:lVrwvJpG5H0349u09q/Jrau/O9OMmdof6Gsp9Ebcne1Z:lbHd9u096326G+2ceP
TLSH
T1DF161231B64084F3F0933035D469B6775E2C612DA39484E763BD48A8D6E0EE2F73AA47
MD5 SHA1 SHA512 SSDEEP TLSH

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
2026-10-25_ba624782b8100ba811b4f07e10424292_amadey_elex_glassworm_luca-stealer_njrat_smoke-loader

File Explorer

2026-10-25_ba624782b8100ba811b4f07e10424292_amadey_elex_glassworm_luca-stealer_njrat_smoke-loader

.exe 4.0MB

2026-10-25_ba624782b8100ba811b4f07e10424292_amadey_elex_glassworm_luca-stealer_njrat_smoke-loader

IMPHASH dab8de5d5328ff0f333866210492533d
SHA256 770309c41878f2ecf2a55be6db4b84c5cc4c65893cacc34069e518bc8d5644f3
MD5 ba624782b8100ba811b4f07e10424292
SHA1 ecbc4c5d979d4575c0f48e7f063ed9845d616202
SHA512 b6dc8a66a17a3d3eefb2f595762eab6e446f5b3c8ae90d18015e8179349473de3a8a1b76990f4b05b3a32678d4cc84d48d8af359450cd0c028c4722e4dfcf38e
SSDEEP 98304:lVrwvJpG5H0349u09q/Jrau/O9OMmdof6Gsp9Ebcne1Z:lbHd9u096326G+2ceP
TLSH
T1DF161231B64084F3F0933035D469B6775E2C612DA39484E763BD48A8D6E0EE2F73AA47
MD5 SHA1 SHA512 SSDEEP TLSH

windows:4 windows x86 arch:x86

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

0

Major OS version

4

Entry point

6841

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LINE_NUMS_STRIPPED IMAGE_FILE_32BIT_MACHINE

PDB paths

kernel32

GetCurrentThreadId GetCurrentProcess GetSystemTimeAsFileTime SetUnhandledExceptionFilter GetModuleHandleW CloseHandle Sleep FreeLibrary MultiByteToWideChar WideCharToMultiByte SetLastError HeapAlloc DeleteCriticalSection LeaveCriticalSection WaitForSingleObject CreateFileW GetModuleFileNameW GetCommandLineW GetACP FormatMessageW InitializeCriticalSection HeapReAlloc GetConsoleMode TlsSetValue TlsAlloc HeapSize WriteConsoleW GetCPInfo SetFilePointer GetStringTypeW RtlUnwind GetEnvironmentStringsW FindFirstFileW DeleteFileW GetConsoleCP GetCommandLineA DecodePointer ResetEvent ReleaseMutex OutputDebugStringW VirtualFree GetModuleHandleExW GetLocaleInfoW UnmapViewOfFile GetExitCodeProcess ExpandEnvironmentStringsW CreateProcessW

user32

LoadStringW DispatchMessageW DestroyWindow ReleaseDC DefWindowProcW MessageBoxW PostQuitMessage GetWindowLongW GetDlgItem GetClientRect SetWindowPos EnableWindow IsWindow LoadCursorW GetParent EndDialog SetWindowTextW LoadIconW SetFocus SetForegroundWindow GetSysColor PeekMessageW BeginPaint ScreenToClient SetCursor KillTimer GetWindow GetWindowTextW CharUpperW

Sharing

General

Malware Config

Signatures

File Explorer

2026-10-25_ba624782b8100ba811b4f07e10424292_amadey_elex_glassworm_luca-stealer_njrat_smoke-loader

kernel32

user32

generic