2026-11-01_83eff8c861f4cf316f1fc1eb5e321eb4_amadey_elex_glassworm_luca-stealer_njrat_smoke-loader

General

Target
2026-11-01_83eff8c861f4cf316f1fc1eb5e321eb4_amadey_elex_glassworm_luca-stealer_njrat_smoke-loader
Size 4.0MB
Sample261102-tpzchavwez
SHA256 78b6a5ba22c0a096324926acf08392e517d23b2b0439ea19c9a4f87b08f234be
MD5 83eff8c861f4cf316f1fc1eb5e321eb4
SHA1 54e996e85e7ed4df39f05ab38fc769b544bc95e1
SHA512 1bb4c815ad485a4685ede9d63e0ebfdd6c46cfc3414a06a68392c9e76c22f94bf7d034f5b73a620bd4bcb206121170e55c24bdd93a922f2a9fbd8aba92bf7664
SSDEEP 49152:Z0OXFz9wvJpGVbMnrwhjgEPmHg3+4w2Twf1cwc:ZVrwvJpGj4f1cwc
TLSH
T19E16BE66753180E3E2E342355D6A46EB4928B5BD57F4C0CB528D84F76BE04C27A3EA0F
MD5 SHA1 SHA512 SSDEEP TLSH

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
2026-11-01_83eff8c861f4cf316f1fc1eb5e321eb4_amadey_elex_glassworm_luca-stealer_njrat_smoke-loader

File Explorer

2026-11-01_83eff8c861f4cf316f1fc1eb5e321eb4_amadey_elex_glassworm_luca-stealer_njrat_smoke-loader

.exe 4.0MB

2026-11-01_83eff8c861f4cf316f1fc1eb5e321eb4_amadey_elex_glassworm_luca-stealer_njrat_smoke-loader

IMPHASH a27e17fa5d851bf2708a8fcc26ab6a6b
SHA256 78b6a5ba22c0a096324926acf08392e517d23b2b0439ea19c9a4f87b08f234be
MD5 83eff8c861f4cf316f1fc1eb5e321eb4
SHA1 54e996e85e7ed4df39f05ab38fc769b544bc95e1
SHA512 1bb4c815ad485a4685ede9d63e0ebfdd6c46cfc3414a06a68392c9e76c22f94bf7d034f5b73a620bd4bcb206121170e55c24bdd93a922f2a9fbd8aba92bf7664
SSDEEP 49152:Z0OXFz9wvJpGVbMnrwhjgEPmHg3+4w2Twf1cwc:ZVrwvJpGj4f1cwc
TLSH
T19E16BE66753180E3E2E342355D6A46EB4928B5BD57F4C0CB528D84F76BE04C27A3EA0F
MD5 SHA1 SHA512 SSDEEP TLSH

windows:4 windows x86 arch:x86

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

0

Major OS version

4

Entry point

13763

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LINE_NUMS_STRIPPED IMAGE_FILE_32BIT_MACHINE

PDB paths

kernel32

GetCurrentProcessId SetUnhandledExceptionFilter GetModuleHandleW CloseHandle TerminateProcess UnhandledExceptionFilter GetTickCount FreeLibrary MultiByteToWideChar WideCharToMultiByte HeapAlloc LocalFree WriteFile WaitForSingleObject GetProcessHeap CreateFileW ExitProcess GetModuleFileNameW GetStartupInfoW GetCommandLineW ReadFile RaiseException SetEvent GetACP InitializeCriticalSection HeapReAlloc GetConsoleMode CreateEventW HeapSize LoadLibraryExW CreateThread TlsFree CompareStringW RtlUnwind LCMapStringW GetModuleFileNameA GetOEMCP SetStdHandle FreeEnvironmentStringsW FindFirstFileW DeleteFileW VirtualAlloc GetConsoleCP LocalAlloc SetEndOfFile ResetEvent CreateFileA GetFileSize EncodePointer VirtualFree GetModuleHandleExW GetLocaleInfoW CreateDirectoryW GetFullPathNameW UnmapViewOfFile GetExitCodeProcess ExpandEnvironmentStringsW CreateProcessW

user32

DestroyWindow DefWindowProcW MessageBoxW PostQuitMessage CreateWindowExW GetWindowLongW GetSystemMetrics GetDC GetWindowRect PostMessageW GetClientRect SetWindowPos IsWindow SetTimer SetFocus PeekMessageW BeginPaint ScreenToClient SetCursor KillTimer GetWindow SystemParametersInfoW GetKeyState MessageBoxA CharUpperW

Sharing

General

Malware Config

Signatures

File Explorer

2026-11-01_83eff8c861f4cf316f1fc1eb5e321eb4_amadey_elex_glassworm_luca-stealer_njrat_smoke-loader

kernel32

user32

generic