General
- Target 2026-07-06_e9bdb3c467146eb329c3c2a9d431c87e_elex_glassworm_mafia_njrat_stealc_tofsee
- Size 935KB
- Sample260707-ajbjpsd14w
- SHA256 2e0cdf364990a807cd1289a7c1d1c9c91cc460679dccf89f0e38a21abc3dd327
- MD5 e9bdb3c467146eb329c3c2a9d431c87e
- SHA1 2a0cbe51fe993751b9ca7948b2cf5b5c01d3f3ed
- SHA512 6652274783b3ca2a7e15ad61427c3360bab2dd71c0460a09563c005799b694e1d5b659d0d9ffbfca2526acc05cdf5fcca7fbda0de9b091fef0a2a8a7b4e3acc6
- SSDEEP 12288:Xb4bZudi79LbTmlnfA/TUE8ETPIllAdvYAIXmt0LDH4L:Xb4bcdkLbTifAQITPI74
- TLSH T11615BFE9EA9AC0F1E3660A300BE0C310B772FCA41B525A5FA1FC527F2C554D5EF61626
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
8/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-07-06_e9bdb3c467146eb329c3c2a9d431c87e_elex_glassworm_mafia_njrat_stealc_tofsee.exe
Resource
win10v2004-20260513-en
4 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-07-06_e9bdb3c467146eb329c3c2a9d431c87e_elex_glassworm_mafia_njrat_stealc_tofsee.exe
Resource
win11ltsc2024-20260706-en
14 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-07-06_e9bdb3c467146eb329c3c2a9d431c87e_elex_glassworm_mafia_njrat_stealc_tofsee
- Size 935KB
- SHA256 2e0cdf364990a807cd1289a7c1d1c9c91cc460679dccf89f0e38a21abc3dd327
- MD5 e9bdb3c467146eb329c3c2a9d431c87e
- SHA1 2a0cbe51fe993751b9ca7948b2cf5b5c01d3f3ed
- SHA512 6652274783b3ca2a7e15ad61427c3360bab2dd71c0460a09563c005799b694e1d5b659d0d9ffbfca2526acc05cdf5fcca7fbda0de9b091fef0a2a8a7b4e3acc6
- SSDEEP 12288:Xb4bZudi79LbTmlnfA/TUE8ETPIllAdvYAIXmt0LDH4L:Xb4bcdkLbTifAQITPI74
- TLSH T11615BFE9EA9AC0F1E3660A300BE0C310B772FCA41B525A5FA1FC527F2C554D5EF61626
- MD5 SHA1 SHA512 SSDEEP TLSH
Score8/10-
Boot or Logon Autostart Execution: Active Setup
Adversaries may achieve persistence by adding a Registry key to the Active Setup of the local machine.
-
Deletes itself
-
Executes dropped EXE
-
Enumerates connected drives
Attempts to read the root path of hard drives other than the default C: drive.