General
- Target 2026-04-23_69d6aa1cd77e92ede9d603d61e46b563_elex_glassworm_luca-stealer_njrat_remcos_smoke-loader
- Size 6.6MB
- Sample260423-ha76badv7s
- SHA256 c70862e9c869d6e9ac2e881c86e81e818085040af2c862cc4e803caf5d42cfea
- MD5 69d6aa1cd77e92ede9d603d61e46b563
- SHA1 5d09029aadebb2910872d788a80de97fefae1f60
- SHA512 957dbcf9b3820fa5f8132656ad209ec0217d15d6d411315a875d789f99e6214cc24ead982945887b340e461395bc5a8f9c0fccfea8332e00058dbe4e4ffb8f79
- SSDEEP 196608:eAqjTpnhXlmyWCZNulPKQ8hY/Bkr/fOIT/+VdlBFKaz1:kfauN/HYOSIT/EVF9h
- TLSH T171663381F0928CBAE8F611371AB6D1353E7AF5230B0585AF639C5A977A303D1A77C61C
- MD5 SHA1 SHA512 SSDEEP TLSH
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-04-23_69d6aa1cd77e92ede9d603d61e46b563_elex_glassworm_luca-stealer_njrat_remcos_smoke-loader.exe
Resource
win10v2004-20260130-en
14 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-04-23_69d6aa1cd77e92ede9d603d61e46b563_elex_glassworm_luca-stealer_njrat_remcos_smoke-loader
- Size 6.6MB
- SHA256 c70862e9c869d6e9ac2e881c86e81e818085040af2c862cc4e803caf5d42cfea
- MD5 69d6aa1cd77e92ede9d603d61e46b563
- SHA1 5d09029aadebb2910872d788a80de97fefae1f60
- SHA512 957dbcf9b3820fa5f8132656ad209ec0217d15d6d411315a875d789f99e6214cc24ead982945887b340e461395bc5a8f9c0fccfea8332e00058dbe4e4ffb8f79
- SSDEEP 196608:eAqjTpnhXlmyWCZNulPKQ8hY/Bkr/fOIT/+VdlBFKaz1:kfauN/HYOSIT/EVF9h
- TLSH T171663381F0928CBAE8F611371AB6D1353E7AF5230B0585AF639C5A977A303D1A77C61C
- MD5 SHA1 SHA512 SSDEEP TLSH
Contacts a large (7656) amount of remote hosts
This may indicate a network scan to discover remotely running services.
Creates a large amount of network flows
This may indicate a network scan to discover remotely running services.
Grants admin privileges
Uses net.exe to modify the user's privileges.
Loads dropped DLL