2026-11-03_3f65a8e5a4816c09bbc5310cd9b37ad4_amadey_elex_glassworm_luca-stealer_njrat_smoke-loader

General

Target
2026-11-03_3f65a8e5a4816c09bbc5310cd9b37ad4_amadey_elex_glassworm_luca-stealer_njrat_smoke-loader
Size 4.0MB
Sample261104-2thjjsdz5y
SHA256 4e182c1495e177e827d0ba94d546faf98ae0b5d4a9864267e99279339e006e4b
MD5 3f65a8e5a4816c09bbc5310cd9b37ad4
SHA1 49497fb36043215ecbf8f7b4518948dff77868a7
SHA512 1dac5b54e9a7781c1d15af0d558541b41fb1b1f3d3fdd81adf352161228a47b6ec43cf8c6ba0421dac2304d5625722e19b5958220d85093091146f75cd409156
SSDEEP 98304:hVrwvJpG8jo8J0wy/JYp6XJOTrRRVb70osI:h6jowny6pAT
TLSH
T1151622F6F4819072F5D204B8D5754B761A2F92B02328C8EB9FF064B5A7E22D17F3464A
MD5 SHA1 SHA512 SSDEEP TLSH

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
2026-11-03_3f65a8e5a4816c09bbc5310cd9b37ad4_amadey_elex_glassworm_luca-stealer_njrat_smoke-loader

File Explorer

2026-11-03_3f65a8e5a4816c09bbc5310cd9b37ad4_amadey_elex_glassworm_luca-stealer_njrat_smoke-loader

.exe 4.0MB

2026-11-03_3f65a8e5a4816c09bbc5310cd9b37ad4_amadey_elex_glassworm_luca-stealer_njrat_smoke-loader

IMPHASH 655743663ac7deecec80613dcb0d0ee8
SHA256 4e182c1495e177e827d0ba94d546faf98ae0b5d4a9864267e99279339e006e4b
MD5 3f65a8e5a4816c09bbc5310cd9b37ad4
SHA1 49497fb36043215ecbf8f7b4518948dff77868a7
SHA512 1dac5b54e9a7781c1d15af0d558541b41fb1b1f3d3fdd81adf352161228a47b6ec43cf8c6ba0421dac2304d5625722e19b5958220d85093091146f75cd409156
SSDEEP 98304:hVrwvJpG8jo8J0wy/JYp6XJOTrRRVb70osI:h6jowny6pAT
TLSH
T1151622F6F4819072F5D204B8D5754B761A2F92B02328C8EB9FF064B5A7E22D17F3464A
MD5 SHA1 SHA512 SSDEEP TLSH

windows:4 windows x86 arch:x86

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

0

Major OS version

4

Entry point

4183684

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LINE_NUMS_STRIPPED IMAGE_FILE_32BIT_MACHINE

PDB paths

kernel32

GetCurrentThreadId GetCurrentProcess SetUnhandledExceptionFilter GetModuleHandleW QueryPerformanceCounter GetProcAddress CloseHandle TerminateProcess UnhandledExceptionFilter Sleep MultiByteToWideChar DeleteCriticalSection WriteFile WaitForSingleObject CreateFileW GetStartupInfoW ReadFile GetACP FormatMessageW GetFileType TlsGetValue InitializeCriticalSection HeapReAlloc WriteConsoleW LoadLibraryW GetCPInfo TlsFree SetFilePointer GetStringTypeW InitializeCriticalSectionAndSpinCount GetOEMCP SetStdHandle IsValidCodePage DeleteFileW GetConsoleCP DecodePointer SetEndOfFile ResetEvent GetVersionExW CreateFileA OutputDebugStringW GetFileSize EncodePointer LoadLibraryA GetLocaleInfoW CreateDirectoryW LoadResource UnmapViewOfFile GetExitCodeProcess CreateProcessW

user32

LoadStringW DispatchMessageW DestroyWindow ReleaseDC DefWindowProcW MessageBoxW CreateWindowExW GetWindowLongW GetDlgItem GetSystemMetrics GetWindowRect PostMessageW SendMessageW SetWindowPos EnableWindow EndDialog SetTimer LoadIconW SetFocus SetForegroundWindow PeekMessageW EndPaint BeginPaint SetCursor InvalidateRect EnableMenuItem GetWindow UpdateWindow CharUpperW ClientToScreen

Sharing

General

Malware Config

Signatures

File Explorer

2026-11-03_3f65a8e5a4816c09bbc5310cd9b37ad4_amadey_elex_glassworm_luca-stealer_njrat_smoke-loader

kernel32

user32

generic