General
- Target 2026-07-02_529250dc2da2d2f827a0e6005e1fe960_elex_glassworm_luca-stealer_medusalocker_njrat_remcos
- Size 1.8MB
- Sample260702-ns2n5sg171
- SHA256 50bf3a8c44e8eba30b6bb1048fdc4b3b60ab939dcc52cc7bef861109d7b91004
- MD5 529250dc2da2d2f827a0e6005e1fe960
- SHA1 0aa262d1529f7f87fc22739ccd595096c91d143b
- SHA512 123fd4284f132282d3952b9c90f2a021bb9b396b5f9414657243fea30b8446a9bccff14a6e0dacc04d6bb8f7872509af88abfd7b4ef9c95aa8e24e7fdf3e217b
- SSDEEP 24576:exjhWH7kCtZA53i3mmrCIfF+BrgmdMLhWcucu7AV+mZcwiodyTAV+mY1otpcQnH:cWbkCtZA53i3mEX82mshfuhxK0N
- TLSH T1A285F86136E7AA29E4F29438C630E2B144536CE39A2672039E4E9FC97E314F547D47B3
- MD5 SHA1 SHA512 SSDEEP TLSH
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-07-02_529250dc2da2d2f827a0e6005e1fe960_elex_glassworm_luca-stealer_medusalocker_njrat_remcos.exe
Resource
win10v2004-20260513-en
9 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-07-02_529250dc2da2d2f827a0e6005e1fe960_elex_glassworm_luca-stealer_medusalocker_njrat_remcos
- Size 1.8MB
- SHA256 50bf3a8c44e8eba30b6bb1048fdc4b3b60ab939dcc52cc7bef861109d7b91004
- MD5 529250dc2da2d2f827a0e6005e1fe960
- SHA1 0aa262d1529f7f87fc22739ccd595096c91d143b
- SHA512 123fd4284f132282d3952b9c90f2a021bb9b396b5f9414657243fea30b8446a9bccff14a6e0dacc04d6bb8f7872509af88abfd7b4ef9c95aa8e24e7fdf3e217b
- SSDEEP 24576:exjhWH7kCtZA53i3mmrCIfF+BrgmdMLhWcucu7AV+mZcwiodyTAV+mY1otpcQnH:cWbkCtZA53i3mEX82mshfuhxK0N
- TLSH T1A285F86136E7AA29E4F29438C630E2B144536CE39A2672039E4E9FC97E314F547D47B3
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Downloads MZ/PE file
-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Executes dropped EXE
-
Loads dropped DLL