General
- Target 2026-07-28_177cd1bd18834333fd2ec30f7bcc1fd8_elex_glassworm_luca-stealer_mespinoza_njrat_remcos
- Size 1.6MB
- Sample260729-b6klkasamf
- SHA256 c3b3abf68d3af0d73263dd71dc6003c43cfe38d53b521878330fa37fc9dcbc41
- MD5 177cd1bd18834333fd2ec30f7bcc1fd8
- SHA1 e5380c16ac092f2b5abc5496a7ecc29e46109063
- SHA512 edc243c3850746a0c3da858a5faa251d45fcdf6149490464b3453374d25515c952fcbfd2378c1ce3a1bc892a6ae4c7e879c100519b056cb6f1f0961ab91d8c07
- SSDEEP 49152:OIQydHtJwYTRi1FNx0ncO+0jlnyS9yCarkz3:PNJJD5nd9yJrs
- TLSH T1F075BF6037C59536F2B251729E7C976A447EBAA20F32D1CF52888A5D2A709C11E33F37
- MD5 SHA1 SHA512 SSDEEP TLSH
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-07-28_177cd1bd18834333fd2ec30f7bcc1fd8_elex_glassworm_luca-stealer_mespinoza_njrat_remcos.exe
Resource
win10v2004-20260513-en
8 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-07-28_177cd1bd18834333fd2ec30f7bcc1fd8_elex_glassworm_luca-stealer_mespinoza_njrat_remcos
- Size 1.6MB
- SHA256 c3b3abf68d3af0d73263dd71dc6003c43cfe38d53b521878330fa37fc9dcbc41
- MD5 177cd1bd18834333fd2ec30f7bcc1fd8
- SHA1 e5380c16ac092f2b5abc5496a7ecc29e46109063
- SHA512 edc243c3850746a0c3da858a5faa251d45fcdf6149490464b3453374d25515c952fcbfd2378c1ce3a1bc892a6ae4c7e879c100519b056cb6f1f0961ab91d8c07
- SSDEEP 49152:OIQydHtJwYTRi1FNx0ncO+0jlnyS9yCarkz3:PNJJD5nd9yJrs
- TLSH T1F075BF6037C59536F2B251729E7C976A447EBAA20F32D1CF52888A5D2A709C11E33F37
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Executes dropped EXE
-
Enumerates connected drives
Attempts to read the root path of hard drives other than the default C: drive.
-
Drops file in System32 directory
MITRE ATT&CK Enterprise v16
Credential Access
Credentials from Password Stores
1Credentials from Web Browsers
1Unsecured Credentials
1Credentials In Files
1