2026-11-09_9a3bd1e68f2b9399a92d5aca61b96573_amadey_elex_glassworm_luca-stealer_njrat_smoke-loader

General

Target
2026-11-09_9a3bd1e68f2b9399a92d5aca61b96573_amadey_elex_glassworm_luca-stealer_njrat_smoke-loader
Size 4.0MB
Sample261110-phfjlah13p
SHA256 c8b6ff7b5efc09d3c83525a0dda9730b09e1281b7da319ab2a88a5e6f2561ce6
MD5 9a3bd1e68f2b9399a92d5aca61b96573
SHA1 0dd4341d588cec5f25e6867576d5f406fbc058a0
SHA512 04aa42b216109a625ff08ba0cb296720596591c6494185cba083544068a03c73924883476e83af237fe47e5d5ac2976ad2288083f8a20d2ad0089c3cedcd5603
SSDEEP 98304:WgZk4kFKu8DuyhLI3l8u7JaFRSMbg6kVrwvJpG:Wckbwu8DuyklnQCMdk
TLSH
T13016122374F0D076E0E650B7E1798B721E6C973B231D60DBA29138A1BAE10D1777B74A
MD5 SHA1 SHA512 SSDEEP TLSH

Score

3^/10

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
2026-11-09_9a3bd1e68f2b9399a92d5aca61b96573_amadey_elex_glassworm_luca-stealer_njrat_smoke-loader

2026-11-09_9a3bd1e68f2b9399a92d5aca61b96573_amadey_elex_glassworm_luca-stealer_njrat_smoke-loader

.exe 4.0MB

IMPHASH 9b0919320038b1c00bae153c10c8fcc9
SHA256 c8b6ff7b5efc09d3c83525a0dda9730b09e1281b7da319ab2a88a5e6f2561ce6
MD5 9a3bd1e68f2b9399a92d5aca61b96573
SHA1 0dd4341d588cec5f25e6867576d5f406fbc058a0
SHA512 04aa42b216109a625ff08ba0cb296720596591c6494185cba083544068a03c73924883476e83af237fe47e5d5ac2976ad2288083f8a20d2ad0089c3cedcd5603
SSDEEP 98304:WgZk4kFKu8DuyhLI3l8u7JaFRSMbg6kVrwvJpG:Wckbwu8DuyklnQCMdk
TLSH
T13016122374F0D076E0E650B7E1798B721E6C973B231D60DBA29138A1BAE10D1777B74A
MD5 SHA1 SHA512 SSDEEP TLSH

Minor OS version

0

Major OS version

4

Entry point

8173

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LINE_NUMS_STRIPPED IMAGE_FILE_32BIT_MACHINE

PDB paths