General
- Target 2026-08-03_499aff790f10b5ea727d6de8fd1ce1c8_elex_glassworm_luca-stealer_njrat_remcos_rhadamanthys_smoke-loader
- Size 6.2MB
- Sample260803-r421tsbb28
- SHA256 2644e2b5455bdc656e8cd49a59f8782faad87e653bfacc2763f50a8b9f41715f
- MD5 499aff790f10b5ea727d6de8fd1ce1c8
- SHA1 49cc7a5167cf033c423269f689032ef0f056e300
- SHA512 faa855931d24bec3bebd2acd7cde5a8bc31d4ebe9460e5333c1e2c7263233bbf8575eed89eefa21e3f7e754156592e1a16b2178095b681176becf125dc03d049
- SSDEEP 98304:AxQeMZLsAAa/7JNzJwjI5klUigKYkBEvHPILz1p/kjRm4OWL22ImljBV:XeEZF6bUpMBF1p/kjRm4OWi2b
- TLSH T10E66331AAC868176C273183248B2D6712A7A3AF60F2854574BD51F3F1F721B17D3F4A9
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
7/10
Behavioral task
behavioral1
Sample
2026-08-03_499aff790f10b5ea727d6de8fd1ce1c8_elex_glassworm_luca-stealer_njrat_remcos_rhadamanthys_smoke-loader.exe
Resource
win10v2004-20260513-en
9 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-08-03_499aff790f10b5ea727d6de8fd1ce1c8_elex_glassworm_luca-stealer_njrat_remcos_rhadamanthys_smoke-loader.exe
Resource
win11ltsc2024-20260709-en
8 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-08-03_499aff790f10b5ea727d6de8fd1ce1c8_elex_glassworm_luca-stealer_njrat_remcos_rhadamanthys_smoke-loader
- Size 6.2MB
- SHA256 2644e2b5455bdc656e8cd49a59f8782faad87e653bfacc2763f50a8b9f41715f
- MD5 499aff790f10b5ea727d6de8fd1ce1c8
- SHA1 49cc7a5167cf033c423269f689032ef0f056e300
- SHA512 faa855931d24bec3bebd2acd7cde5a8bc31d4ebe9460e5333c1e2c7263233bbf8575eed89eefa21e3f7e754156592e1a16b2178095b681176becf125dc03d049
- SSDEEP 98304:AxQeMZLsAAa/7JNzJwjI5klUigKYkBEvHPILz1p/kjRm4OWL22ImljBV:XeEZF6bUpMBF1p/kjRm4OWi2b
- TLSH T10E66331AAC868176C273183248B2D6712A7A3AF60F2854574BD51F3F1F721B17D3F4A9
- MD5 SHA1 SHA512 SSDEEP TLSH
Score7/10-
Executes dropped EXE
-
Loads dropped DLL
-
Enumerates connected drives
Attempts to read the root path of hard drives other than the default C: drive.
-
Modifies WinLogon