General
- Target 2026-07-26_31ad3cbe84c67fc06c88bd739d7a40f2_elex_glassworm_luca-stealer_njrat_remcos_smoke-loader
- Size 6.6MB
- Sample260726-v1t3layxcs
- SHA256 01e658f47e61c6a71d1e5d272e739961c7ab51d956a52d0c3916859aca223aff
- MD5 31ad3cbe84c67fc06c88bd739d7a40f2
- SHA1 9396217be58530547573c65c5977c0fc6b79ab07
- SHA512 c9a0d7b1e7e6c73240a02a0609d2079e25aed13cdd255bfb8b098e47cf65ed5b713435ca502d1f12380aa9a57ad81ba0fc8cb25b297530c094e52a397acf96f1
- SSDEEP 196608:eAqjTpnhXlmyWCZNulPKQ8hY/Bkr/fOIT/+VdlBFKazz:kfauN/HYOSIT/EVF9n
- TLSH T193663381F0928CBAE8F611371AB6D1353E7AF5230B0585AF63AC5A9779303D1A77C61C
- MD5 SHA1 SHA512 SSDEEP TLSH
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-07-26_31ad3cbe84c67fc06c88bd739d7a40f2_elex_glassworm_luca-stealer_njrat_remcos_smoke-loader.exe
Resource
win10v2004-20260513-en
15 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-07-26_31ad3cbe84c67fc06c88bd739d7a40f2_elex_glassworm_luca-stealer_njrat_remcos_smoke-loader
- Size 6.6MB
- SHA256 01e658f47e61c6a71d1e5d272e739961c7ab51d956a52d0c3916859aca223aff
- MD5 31ad3cbe84c67fc06c88bd739d7a40f2
- SHA1 9396217be58530547573c65c5977c0fc6b79ab07
- SHA512 c9a0d7b1e7e6c73240a02a0609d2079e25aed13cdd255bfb8b098e47cf65ed5b713435ca502d1f12380aa9a57ad81ba0fc8cb25b297530c094e52a397acf96f1
- SSDEEP 196608:eAqjTpnhXlmyWCZNulPKQ8hY/Bkr/fOIT/+VdlBFKazz:kfauN/HYOSIT/EVF9n
- TLSH T193663381F0928CBAE8F611371AB6D1353E7AF5230B0585AF63AC5A9779303D1A77C61C
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Contacts a large (6881) amount of remote hosts
This may indicate a network scan to discover remotely running services.
-
Creates a large amount of network flows
This may indicate a network scan to discover remotely running services.
-
Grants admin privileges
Uses net.exe to modify the user's privileges.
-
Loads dropped DLL