2026-11-03_58c28af607a6174b48434f72cc89329c_amadey_elex_glassworm_luca-stealer_njrat_smoke-loader

General

Target
2026-11-03_58c28af607a6174b48434f72cc89329c_amadey_elex_glassworm_luca-stealer_njrat_smoke-loader
Size 4.0MB
Sample261104-yn3qrat1e1
SHA256 7ee90a2e17338c12252f4c83a5c8f88c7ff444c29c40f63c9366f3f0edb1b0f3
MD5 58c28af607a6174b48434f72cc89329c
SHA1 b47a53b0702cf29d8a332666e75ebf44ba1324b8
SHA512 cb87ca8ef7e3e97f705a42a574e5cff4e9074ecafdec40158adbb4719093d0b23d3f8f9b4e64e39a999f35adb16bf62f38d5541a39bcfdf1f3ba189dfde0d11a
SSDEEP 98304:UaOqkQz/6V3CBn9S2Oi0+YAdvLbDWa5aDVrwvJpG:AQz/EA9S2OSZWa5aD
TLSH
T16516126175405072F192003EB6B68E7E2E1F9A31532790E75ED530A66EE00D2F6BEB4F
MD5 SHA1 SHA512 SSDEEP TLSH

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
2026-11-03_58c28af607a6174b48434f72cc89329c_amadey_elex_glassworm_luca-stealer_njrat_smoke-loader

File Explorer

2026-11-03_58c28af607a6174b48434f72cc89329c_amadey_elex_glassworm_luca-stealer_njrat_smoke-loader

.exe 4.0MB

2026-11-03_58c28af607a6174b48434f72cc89329c_amadey_elex_glassworm_luca-stealer_njrat_smoke-loader

IMPHASH 99e909edf328f597010f715181c49025
SHA256 7ee90a2e17338c12252f4c83a5c8f88c7ff444c29c40f63c9366f3f0edb1b0f3
MD5 58c28af607a6174b48434f72cc89329c
SHA1 b47a53b0702cf29d8a332666e75ebf44ba1324b8
SHA512 cb87ca8ef7e3e97f705a42a574e5cff4e9074ecafdec40158adbb4719093d0b23d3f8f9b4e64e39a999f35adb16bf62f38d5541a39bcfdf1f3ba189dfde0d11a
SSDEEP 98304:UaOqkQz/6V3CBn9S2Oi0+YAdvLbDWa5aDVrwvJpG:AQz/EA9S2OSZWa5aD
TLSH
T16516126175405072F192003EB6B68E7E2E1F9A31532790E75ED530A66EE00D2F6BEB4F
MD5 SHA1 SHA512 SSDEEP TLSH

windows:4 windows x86 arch:x86

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

0

Major OS version

4

Entry point

4178004

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LINE_NUMS_STRIPPED IMAGE_FILE_32BIT_MACHINE

PDB paths

kernel32

GetLastError SetUnhandledExceptionFilter GetModuleHandleW CloseHandle TerminateProcess GetTickCount FreeLibrary MultiByteToWideChar WideCharToMultiByte SetLastError HeapFree LeaveCriticalSection EnterCriticalSection WriteFile ExitProcess GetStdHandle GetCommandLineW ReadFile RaiseException SetEvent GetACP FormatMessageW TlsGetValue InitializeCriticalSection HeapReAlloc FlushFileBuffers CreateEventW TlsAlloc LoadLibraryW GetCPInfo TlsFree SetFilePointer GetFileAttributesW GetStringTypeW RtlUnwind LCMapStringW InitializeCriticalSectionAndSpinCount GetOEMCP IsValidCodePage DeleteFileW LocalAlloc GetCommandLineA ResetEvent OutputDebugStringW GetFileSize VirtualFree lstrlenW GetLocaleInfoW CreateDirectoryW GetFullPathNameW UnmapViewOfFile GetExitCodeProcess ExpandEnvironmentStringsW

user32

TranslateMessage DispatchMessageW ReleaseDC DefWindowProcW CreateWindowExW GetWindowLongW GetDC SendMessageW GetClientRect SetWindowPos LoadCursorW SetTimer SetFocus SetForegroundWindow EndPaint ScreenToClient SetCursor KillTimer InvalidateRect RegisterClassW EnableMenuItem GetWindowTextW UpdateWindow SystemParametersInfoW GetKeyState MessageBoxA CharUpperW

Sharing

General

Malware Config

Signatures

File Explorer

2026-11-03_58c28af607a6174b48434f72cc89329c_amadey_elex_glassworm_luca-stealer_njrat_smoke-loader

kernel32

user32

generic