General
- Target 2026-06-10_cf02be6db03d72de75f14e2b93adc76d_elex_glassworm_luca-stealer_njrat_remcos_smoke-loader
- Size 6.6MB
- Sample260610-p69scacv3p
- SHA256 cc4be1fc04233ecb8b4576017ca2e38530ff25e0cd7ef3f3c3ed29c2f5e26cdb
- MD5 cf02be6db03d72de75f14e2b93adc76d
- SHA1 6a4cdfe434841218294111f550326647206cfbd3
- SHA512 9b931e54b04d9b6d83bc85d23f0f98034611f86393c3b651404867098b7e7c1bf4e2d87c53c60553a04569296695c179f168af19d8edc4373ac0dc20664bf170
- SSDEEP 196608:qbuCCCZNulPKQ8hY/Bkr/fOIT/+VdlBFKazQ:huN/HYOSIT/EVF9M
- TLSH T150663341B092CC7AE8F3253606B7D1346D7EFD130B1049BB62AC4A537E61B92B77921D
- MD5 SHA1 SHA512 SSDEEP TLSH
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-06-10_cf02be6db03d72de75f14e2b93adc76d_elex_glassworm_luca-stealer_njrat_remcos_smoke-loader.exe
Resource
win10v2004-20260513-en
15 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-06-10_cf02be6db03d72de75f14e2b93adc76d_elex_glassworm_luca-stealer_njrat_remcos_smoke-loader
- Size 6.6MB
- SHA256 cc4be1fc04233ecb8b4576017ca2e38530ff25e0cd7ef3f3c3ed29c2f5e26cdb
- MD5 cf02be6db03d72de75f14e2b93adc76d
- SHA1 6a4cdfe434841218294111f550326647206cfbd3
- SHA512 9b931e54b04d9b6d83bc85d23f0f98034611f86393c3b651404867098b7e7c1bf4e2d87c53c60553a04569296695c179f168af19d8edc4373ac0dc20664bf170
- SSDEEP 196608:qbuCCCZNulPKQ8hY/Bkr/fOIT/+VdlBFKazQ:huN/HYOSIT/EVF9M
- TLSH T150663341B092CC7AE8F3253606B7D1346D7EFD130B1049BB62AC4A537E61B92B77921D
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Contacts a large (8144) amount of remote hosts
This may indicate a network scan to discover remotely running services.
-
Creates a large amount of network flows
This may indicate a network scan to discover remotely running services.
-
Grants admin privileges
Uses net.exe to modify the user's privileges.
-
Loads dropped DLL