General

  • Target
    2026-07-14_e9703598eab65395b3b50fa69db35032_elex_glassworm_luca-stealer_mespinoza_njrat_remcos_revil
  • Size 2.9MB
  • Sample260714-dagadacy2j
  • SHA256 944981aedb96b369464def256796c9b0443753a68ced35ca66856a4c02d68b1b
  • MD5 SHA1 SHA512 SSDEEP TLSH
Score
1/10

Malware Config

Signatures

File Explorer

  • 2026-07-14_e9703598eab65395b3b50fa69db35032_elex_glassworm_luca-stealer_mespinoza_njrat_remcos_revil
    .exe 2.9MB

2026-07-14_e9703598eab65395b3b50fa69db35032_elex_glassworm_luca-stealer_mespinoza_njrat_remcos_revil

  • IMPHASH 4babe41eb8d72dce55e89d16f2126205
  • SHA256 944981aedb96b369464def256796c9b0443753a68ced35ca66856a4c02d68b1b
  • MD5 SHA1 SHA512 SSDEEP TLSH
Digest
8b:68:86:e7:53:6b:21:62:b4:b8:35:e2:6c:14:74:ab:62:32:38:83:c7:0c:40:8b:30:23:8b:8a:d1:23:8c:9d
Digest Algorithm
sha256
PE Digests Matches
Trusted
Signing Certificate
SERIALNUMBER=91110108579061530B,CN=北京华夏威科软件技术有限公司,O=北京华夏威科软件技术有限公司,STREET=海淀区西三环北路89号9层A-05,L=北京市,ST=北京市,C=CN,1.3.6.1.4.1.311.60.2.1.2=#13074245494a494e47,1.3.6.1.4.1.311.60.2.1.3=#1302434e,2.5.4.15=#131450726976617465204f7267616e697a6174696f6e
Minor OS version
0
Major OS version
6
Entry point
671786
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_GUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE
PDB paths
C:\Users\XYC\Desktop\Agent_V6_dev\Agent-6.0\vnc-4_1_3-winsrc\win\Win32\Release\UpdateService.pdb