General
- Target 2026-07-17_693bbc4816f163bd82916dccb20c7fdf_elex_glassworm_luca-stealer_njrat_remcos_smoke-loader
- Size 6.2MB
- Sample260717-2krqvsfz6j
- SHA256 8e0d8e481e54f81a645a8076560bdd3fbc2295d2fceb4f44bf831bcdaf866d16
- MD5 693bbc4816f163bd82916dccb20c7fdf
- SHA1 7cc6ce07a85f53cff83284ca519d9d08540dde51
- SHA512 ce18ce45699af791ecbd64812de22bcdc73c0ef20d18037e20f261a57823efd5e076ea6be878ea335109547183832519b8b1b7965f87a72db6375b3ae555ee8f
- SSDEEP 98304:IQeMjLsAAa/7JNzJwjI5klUigKYkBEvHPILz1p/kjRm4OWL22ImljBVA:HeGZF6bUpMBF1p/kjRm4OWi2b0
- TLSH T11C66331AAC464276C233183388B2E6702E693AF51F2D54174FD52B3F1B725A17E2F8B5
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
7/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-07-17_693bbc4816f163bd82916dccb20c7fdf_elex_glassworm_luca-stealer_njrat_remcos_smoke-loader.exe
Resource
win10v2004-20260513-en
10 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-07-17_693bbc4816f163bd82916dccb20c7fdf_elex_glassworm_luca-stealer_njrat_remcos_smoke-loader.exe
Resource
win11ltsc2024-20260709-en
10 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-07-17_693bbc4816f163bd82916dccb20c7fdf_elex_glassworm_luca-stealer_njrat_remcos_smoke-loader
- Size 6.2MB
- SHA256 8e0d8e481e54f81a645a8076560bdd3fbc2295d2fceb4f44bf831bcdaf866d16
- MD5 693bbc4816f163bd82916dccb20c7fdf
- SHA1 7cc6ce07a85f53cff83284ca519d9d08540dde51
- SHA512 ce18ce45699af791ecbd64812de22bcdc73c0ef20d18037e20f261a57823efd5e076ea6be878ea335109547183832519b8b1b7965f87a72db6375b3ae555ee8f
- SSDEEP 98304:IQeMjLsAAa/7JNzJwjI5klUigKYkBEvHPILz1p/kjRm4OWL22ImljBVA:HeGZF6bUpMBF1p/kjRm4OWi2b0
- TLSH T11C66331AAC464276C233183388B2E6702E693AF51F2D54174FD52B3F1B725A17E2F8B5
- MD5 SHA1 SHA512 SSDEEP TLSH
Score7/10-
ACProtect 1.3x - 1.4x DLL software
Detects file using ACProtect software.
-
Executes dropped EXE
-
Loads dropped DLL
-
Drops file in System32 directory