General
- Target 2026-08-01_909d98e36832733c5997e35fc30e8bbd_elex_glassworm_luca-stealer_njrat_remcos_smoke-loader
- Size 6.2MB
- Sample260801-qlcgsawfnd
- SHA256 189c8bf2a908840e22c6edebd278ad78d750fa19c5d129253ece83a52f6a73f6
- MD5 909d98e36832733c5997e35fc30e8bbd
- SHA1 1c7f34b7b12afb2b4dca1fc95b45dbeae2a20736
- SHA512 319dee0c63c9e8f745e4a68469f88aa705da1cfb2a5637b10123f3a7c396f8a983b577fe4b0042b2df492d31af77257e15fc10d5591bee52f81acd5b8884b93b
- SSDEEP 98304:hQeMjLsAAa/7JNzJwjI5klUigKYkBEvHPILz1p/kjRm4OWL22ImljBVll:yeGZF6bUpMBF1p/kjRm4OWi2bj
- TLSH T1C566331AAC4A4276C233183388B2D6712E693AF50F2D54174FD52B3F1B725A17E2F8B5
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
7/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-08-01_909d98e36832733c5997e35fc30e8bbd_elex_glassworm_luca-stealer_njrat_remcos_smoke-loader.exe
Resource
win10v2004-20260513-en
10 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-08-01_909d98e36832733c5997e35fc30e8bbd_elex_glassworm_luca-stealer_njrat_remcos_smoke-loader.exe
Resource
win11ltsc2024-20260709-en
10 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-08-01_909d98e36832733c5997e35fc30e8bbd_elex_glassworm_luca-stealer_njrat_remcos_smoke-loader
- Size 6.2MB
- SHA256 189c8bf2a908840e22c6edebd278ad78d750fa19c5d129253ece83a52f6a73f6
- MD5 909d98e36832733c5997e35fc30e8bbd
- SHA1 1c7f34b7b12afb2b4dca1fc95b45dbeae2a20736
- SHA512 319dee0c63c9e8f745e4a68469f88aa705da1cfb2a5637b10123f3a7c396f8a983b577fe4b0042b2df492d31af77257e15fc10d5591bee52f81acd5b8884b93b
- SSDEEP 98304:hQeMjLsAAa/7JNzJwjI5klUigKYkBEvHPILz1p/kjRm4OWL22ImljBVll:yeGZF6bUpMBF1p/kjRm4OWi2bj
- TLSH T1C566331AAC4A4276C233183388B2D6712E693AF50F2D54174FD52B3F1B725A17E2F8B5
- MD5 SHA1 SHA512 SSDEEP TLSH
Score7/10-
ACProtect 1.3x - 1.4x DLL software
Detects file using ACProtect software.
-
Executes dropped EXE
-
Loads dropped DLL
-
Drops file in System32 directory