General
- Target 2026-07-20_e2841b38ef753c0bf7037c2446d1926c_elex_glassworm_luca-stealer_njrat_remcos_smoke-loader
- Size 6.2MB
- Sample260720-vb1h3sgw4r
- SHA256 cf2f765a94344fe6851bfb1af4c66b6113541a7f2ddfdb7319b28c497b7bd14d
- MD5 e2841b38ef753c0bf7037c2446d1926c
- SHA1 01f29b39dd35dc4cb3b9fbe6d3471e05b3a28824
- SHA512 579b4297b65a7eea71772d563387bda8cc985f9a62f797043b9eff4f357fc230829110c10511b8e8876b302bbb290b67ca99640b49c79cef3704258f31049b07
- SSDEEP 98304:qQeMjLsAAa/7JNzJwjI5klUigKYkBEvHPILz1p/kjRm4OWL22ImljBVLF:ReGZF6bUpMBF1p/kjRm4OWi2bt
- TLSH T12866331AAC864276C233183348B2E6712E693AF51F2D54170FD52B3F1B725A17E2F8B5
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
7/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-07-20_e2841b38ef753c0bf7037c2446d1926c_elex_glassworm_luca-stealer_njrat_remcos_smoke-loader.exe
Resource
win10v2004-20260513-en
10 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-07-20_e2841b38ef753c0bf7037c2446d1926c_elex_glassworm_luca-stealer_njrat_remcos_smoke-loader.exe
Resource
win11ltsc2024-20260710-en
10 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-07-20_e2841b38ef753c0bf7037c2446d1926c_elex_glassworm_luca-stealer_njrat_remcos_smoke-loader
- Size 6.2MB
- SHA256 cf2f765a94344fe6851bfb1af4c66b6113541a7f2ddfdb7319b28c497b7bd14d
- MD5 e2841b38ef753c0bf7037c2446d1926c
- SHA1 01f29b39dd35dc4cb3b9fbe6d3471e05b3a28824
- SHA512 579b4297b65a7eea71772d563387bda8cc985f9a62f797043b9eff4f357fc230829110c10511b8e8876b302bbb290b67ca99640b49c79cef3704258f31049b07
- SSDEEP 98304:qQeMjLsAAa/7JNzJwjI5klUigKYkBEvHPILz1p/kjRm4OWL22ImljBVLF:ReGZF6bUpMBF1p/kjRm4OWi2bt
- TLSH T12866331AAC864276C233183348B2E6712E693AF51F2D54170FD52B3F1B725A17E2F8B5
- MD5 SHA1 SHA512 SSDEEP TLSH
Score7/10-
ACProtect 1.3x - 1.4x DLL software
Detects file using ACProtect software.
-
Executes dropped EXE
-
Loads dropped DLL
-
Drops file in System32 directory