General
- Target 2026-07-20_34738e5aba549e5a453b3edc31006069_elex_glassworm_luca-stealer_njrat_remcos_smoke-loader
- Size 6.2MB
- Sample260720-wjfz3sb141
- SHA256 8e05de042586c48796ecd4bd6505cbc91d5c757dfc69a15b15f33804681f9427
- MD5 34738e5aba549e5a453b3edc31006069
- SHA1 5c6d69300497134efac55202d93970d0e471733b
- SHA512 6da29e43fcdb4e4b93d866602f39dcdff53c70dc387857670d95dee227515439f335dd5a15594b5940eae25fe81ae30dae281814604e52424cb9f43199489e10
- SSDEEP 98304:DQeMjLsAAa/7JNzJwjI5klUigKYkBEvHPILz1p/kjRm4OWL22ImljBVC:0eGZF6bUpMBF1p/kjRm4OWi2be
- TLSH T17866331AAC864276C233183688B2D6712E693AF61F2D54170FD52B3F1B721B17E2F875
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
7/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-07-20_34738e5aba549e5a453b3edc31006069_elex_glassworm_luca-stealer_njrat_remcos_smoke-loader.exe
Resource
win10v2004-20260513-en
10 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-07-20_34738e5aba549e5a453b3edc31006069_elex_glassworm_luca-stealer_njrat_remcos_smoke-loader.exe
Resource
win11ltsc2024-20260709-en
10 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-07-20_34738e5aba549e5a453b3edc31006069_elex_glassworm_luca-stealer_njrat_remcos_smoke-loader
- Size 6.2MB
- SHA256 8e05de042586c48796ecd4bd6505cbc91d5c757dfc69a15b15f33804681f9427
- MD5 34738e5aba549e5a453b3edc31006069
- SHA1 5c6d69300497134efac55202d93970d0e471733b
- SHA512 6da29e43fcdb4e4b93d866602f39dcdff53c70dc387857670d95dee227515439f335dd5a15594b5940eae25fe81ae30dae281814604e52424cb9f43199489e10
- SSDEEP 98304:DQeMjLsAAa/7JNzJwjI5klUigKYkBEvHPILz1p/kjRm4OWL22ImljBVC:0eGZF6bUpMBF1p/kjRm4OWi2be
- TLSH T17866331AAC864276C233183688B2D6712E693AF61F2D54170FD52B3F1B721B17E2F875
- MD5 SHA1 SHA512 SSDEEP TLSH
Score7/10-
ACProtect 1.3x - 1.4x DLL software
Detects file using ACProtect software.
-
Executes dropped EXE
-
Loads dropped DLL
-
Drops file in System32 directory