2026-11-01_82dad941fd273df25c3be65a14484c60_amadey_elex_glassworm_luca-stealer_njrat_smoke-loader

General

Target
2026-11-01_82dad941fd273df25c3be65a14484c60_amadey_elex_glassworm_luca-stealer_njrat_smoke-loader
Size 4.0MB
Sample261102-ttetnabv2w
SHA256 f57b146f454f727d163f87a6f3136d2122896be2d41abf5b1c0977d3571b0767
MD5 82dad941fd273df25c3be65a14484c60
SHA1 ed59f213d3f87a85891dc8dfd1aea2c09eb99c61
SHA512 111446c0641941edb12826cdce9dfa3fd8dd18518079d04df9b3393c91494ebe19713bd9734681f7b9a4c751464721a0c5c0a7e98ee39a4e198a314821e0d472
SSDEEP 98304:YVrwvJpGd6zWmW+wwKlmY0hihnqw5fUG9MKTqXpBDUgi8UevCHi5zRbAOd8+YcfF:Yz6zWmW+wwKlmY0hihqw5fUGaKTkf/60
TLSH
T1CE161291B281C07AFDD605B691BA8B721E2FF620132BC1C7A7D021E95D640E9EF35787
MD5 SHA1 SHA512 SSDEEP TLSH

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
2026-11-01_82dad941fd273df25c3be65a14484c60_amadey_elex_glassworm_luca-stealer_njrat_smoke-loader

File Explorer

2026-11-01_82dad941fd273df25c3be65a14484c60_amadey_elex_glassworm_luca-stealer_njrat_smoke-loader

.exe 4.0MB

2026-11-01_82dad941fd273df25c3be65a14484c60_amadey_elex_glassworm_luca-stealer_njrat_smoke-loader

IMPHASH ecf866a13aeeffd1c3c3bb8a7e771d10
SHA256 f57b146f454f727d163f87a6f3136d2122896be2d41abf5b1c0977d3571b0767
MD5 82dad941fd273df25c3be65a14484c60
SHA1 ed59f213d3f87a85891dc8dfd1aea2c09eb99c61
SHA512 111446c0641941edb12826cdce9dfa3fd8dd18518079d04df9b3393c91494ebe19713bd9734681f7b9a4c751464721a0c5c0a7e98ee39a4e198a314821e0d472
SSDEEP 98304:YVrwvJpGd6zWmW+wwKlmY0hihnqw5fUG9MKTqXpBDUgi8UevCHi5zRbAOd8+YcfF:Yz6zWmW+wwKlmY0hihqw5fUGaKTkf/60
TLSH
T1CE161291B281C07AFDD605B691BA8B721E2FF620132BC1C7A7D021E95D640E9EF35787
MD5 SHA1 SHA512 SSDEEP TLSH

windows:4 windows x86 arch:x86

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

0

Major OS version

4

Entry point

640543

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LINE_NUMS_STRIPPED IMAGE_FILE_32BIT_MACHINE

PDB paths

kernel32

GetCurrentThreadId GetCurrentProcess GetCurrentProcessId GetModuleHandleW QueryPerformanceCounter GetProcAddress TerminateProcess UnhandledExceptionFilter FreeLibrary MultiByteToWideChar SetLastError HeapAlloc LeaveCriticalSection WriteFile WaitForSingleObject CreateFileW ExitProcess GetModuleFileNameW GetStartupInfoW FindClose ReadFile RaiseException SetEvent FormatMessageW TlsGetValue GetConsoleMode CreateEventW TlsAlloc WriteConsoleW LoadLibraryW CreateThread GetCPInfo TlsFree SetFilePointer GetFileAttributesW CompareStringW RtlUnwind LCMapStringW InitializeCriticalSectionAndSpinCount FreeEnvironmentStringsW IsValidCodePage FindFirstFileW DeleteFileW VirtualAlloc LocalAlloc GetCommandLineA DecodePointer ResetEvent ReleaseMutex CreateFileA GetFileSize GetLocaleInfoW GetFullPathNameW LoadResource ExpandEnvironmentStringsW

user32

TranslateMessage LoadStringW MessageBoxW PostQuitMessage SetWindowLongW GetMessageW GetSystemMetrics GetWindowRect PostMessageW SendMessageW IsWindow LoadCursorW GetParent SetWindowTextW SetTimer SetFocus SetForegroundWindow PeekMessageW EndPaint BeginPaint ScreenToClient KillTimer InvalidateRect RegisterClassW EnableMenuItem GetWindowTextW UpdateWindow SystemParametersInfoW CharUpperW ClientToScreen

Sharing

General

Malware Config

Signatures

File Explorer

2026-11-01_82dad941fd273df25c3be65a14484c60_amadey_elex_glassworm_luca-stealer_njrat_smoke-loader

kernel32

user32

generic