General

  • Target
    2026-04-13_3ef949301825082096ede7e38a78b0f3_elex_glassworm_luca-stealer_njrat_remcos_smoke-loader
  • Size 6.6MB
  • Sample260413-ebrm6sbv3q
  • SHA256 e6328c823a1b1eb610d187d293d93e7319755ca6be0d995bad70d0e8a828e2c7
  • MD5 SHA1 SHA512 SSDEEP TLSH

Malware Config

Targets

    • Target
      2026-04-13_3ef949301825082096ede7e38a78b0f3_elex_glassworm_luca-stealer_njrat_remcos_smoke-loader
    • Size 6.6MB
    • SHA256 e6328c823a1b1eb610d187d293d93e7319755ca6be0d995bad70d0e8a828e2c7
    • MD5 SHA1 SHA512 SSDEEP TLSH
    • Beapy

      Beapy is a python worm with crypto mining capabilities.

    • Beapy family

    • Contacts a large (8929) amount of remote hosts

      This may indicate a network scan to discover remotely running services.

    • Creates a large amount of network flows

      This may indicate a network scan to discover remotely running services.

    • Grants admin privileges

      Uses net.exe to modify the user's privileges.

    • Loads dropped DLL

MITRE ATT&CK Enterprise v16

Tasks