General
- Target 2026-07-24_a9d7b6f56792c248e65b61b1897feb2c_elex_glassworm_hijackloader_luca-stealer_medusalocker_mespinoza_njrat_remcos_revil
- Size 2.2MB
- Sample260724-ze679asfma
- SHA256 afdc99d1daaf4fa404e1b65dd1a397510ec8a697c0c1399953271e6a08a1cb65
- MD5 a9d7b6f56792c248e65b61b1897feb2c
- SHA1 1250464a6f1358d38837f4bc33f343364fb415d1
- SHA512 adf5483b335615ae04b25b65a91a454286bcf2327535ad7ae69e4acf4615cf9952bb304278fea9a355572cc306bc9232bd10c55112d45d5bdab23673315877f1
- SSDEEP 49152:MlbSCGw41CoorMU84AA8Hk8UV7K5ZVIm6v3pC4/d+ihkOPpGEw/E9p+:Mlm1XCoov84AUNIoCy
- TLSH T157A5BE13BBC180B2E5AB02345176937F4D3EBE205734C6CB97D0296D4E706D1AB3A7A6
- MD5 SHA1 SHA512 SSDEEP TLSH
Static task
static1
Behavioral task
behavioral1
Sample
2026-07-24_a9d7b6f56792c248e65b61b1897feb2c_elex_glassworm_hijackloader_luca-stealer_medusalocker_me.exe
Resource
win10v2004-20260513-en
20 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-07-24_a9d7b6f56792c248e65b61b1897feb2c_elex_glassworm_hijackloader_luca-stealer_medusalocker_me.exe
Resource
win11ltsc2024-20260709-en
20 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-07-24_a9d7b6f56792c248e65b61b1897feb2c_elex_glassworm_hijackloader_luca-stealer_medusalocker_mespinoza_njrat_remcos_revil
- Size 2.2MB
- SHA256 afdc99d1daaf4fa404e1b65dd1a397510ec8a697c0c1399953271e6a08a1cb65
- MD5 a9d7b6f56792c248e65b61b1897feb2c
- SHA1 1250464a6f1358d38837f4bc33f343364fb415d1
- SHA512 adf5483b335615ae04b25b65a91a454286bcf2327535ad7ae69e4acf4615cf9952bb304278fea9a355572cc306bc9232bd10c55112d45d5bdab23673315877f1
- SSDEEP 49152:MlbSCGw41CoorMU84AA8Hk8UV7K5ZVIm6v3pC4/d+ihkOPpGEw/E9p+:Mlm1XCoov84AUNIoCy
- TLSH T157A5BE13BBC180B2E5AB02345176937F4D3EBE205734C6CB97D0296D4E706D1AB3A7A6
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Downloads MZ/PE file
-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Drops file in System32 directory