General
- Target 2026-07-17_0ab836f39559b6a9f6c589892e5d0bb2_elex_glassworm_luca-stealer_njrat_remcos_smoke-loader
- Size 6.2MB
- Sample260717-3z77tsdw41
- SHA256 19f292b383e8b478ba228266796337ad217c160689e9670c6878108455cb8403
- MD5 0ab836f39559b6a9f6c589892e5d0bb2
- SHA1 8ced86125faecfec9ca9f6ee0db6b6743df08a00
- SHA512 52bf84599f161924ff0ff1122db8006fe9fbb5c2307240e0b887ec66fad65c6d8ab00f671b4f8030693a7cb0a24bec17f40dd692293ed659fb2ca8ed441ad86d
- SSDEEP 98304:sQeMjLsAAa/7JNzJwjI5klUigKYkBEvHPILz1p/kjRm4OWL22ImljBVq:DeGZF6bUpMBF1p/kjRm4OWi2bG
- TLSH T1F666331AAC864276C233183388B2D6712E693AF50F2D54174FD52B3F1B725A17E2F8B5
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
7/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-07-17_0ab836f39559b6a9f6c589892e5d0bb2_elex_glassworm_luca-stealer_njrat_remcos_smoke-loader.exe
Resource
win10v2004-20260513-en
10 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-07-17_0ab836f39559b6a9f6c589892e5d0bb2_elex_glassworm_luca-stealer_njrat_remcos_smoke-loader.exe
Resource
win11ltsc2024-20260709-en
10 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-07-17_0ab836f39559b6a9f6c589892e5d0bb2_elex_glassworm_luca-stealer_njrat_remcos_smoke-loader
- Size 6.2MB
- SHA256 19f292b383e8b478ba228266796337ad217c160689e9670c6878108455cb8403
- MD5 0ab836f39559b6a9f6c589892e5d0bb2
- SHA1 8ced86125faecfec9ca9f6ee0db6b6743df08a00
- SHA512 52bf84599f161924ff0ff1122db8006fe9fbb5c2307240e0b887ec66fad65c6d8ab00f671b4f8030693a7cb0a24bec17f40dd692293ed659fb2ca8ed441ad86d
- SSDEEP 98304:sQeMjLsAAa/7JNzJwjI5klUigKYkBEvHPILz1p/kjRm4OWL22ImljBVq:DeGZF6bUpMBF1p/kjRm4OWi2bG
- TLSH T1F666331AAC864276C233183388B2D6712E693AF50F2D54174FD52B3F1B725A17E2F8B5
- MD5 SHA1 SHA512 SSDEEP TLSH
Score7/10-
ACProtect 1.3x - 1.4x DLL software
Detects file using ACProtect software.
-
Executes dropped EXE
-
Loads dropped DLL
-
Drops file in System32 directory