General
- Target 2026-08-10_36db85cce4862d8dd6ef8cdce26d7cbe_elex_glassworm_luca-stealer_njrat_remcos_smoke-loader
- Size 6.2MB
- Sample260810-2ns34aba73
- SHA256 6adf1b4d5448200e092d73a2c9d84e935e2a145598ffc1ccd256f92f2c866dff
- MD5 36db85cce4862d8dd6ef8cdce26d7cbe
- SHA1 278136aba77830994514a8c4f45bfc37b0458bd5
- SHA512 983561c8e5d6f1c8a41536ca901733b8573480625e893a965138006f7eb548d580a6fd4f2a5f1a201e1a692863b67a77bbd40d026c2cae8cb80d0a6036b37560
- SSDEEP 98304:iQeMjLsAAa/7JNzJwjI5klUigKYkBEvHPILz1p/kjRm4OWL22ImljBVyjt:ZeGZF6bUpMBF1p/kjRm4OWi2bmZ
- TLSH T10966331AAC464276C233183388B2E6712E693AF51F2D54170FD52B3F1B725A17E2F8B5
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
7/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-08-10_36db85cce4862d8dd6ef8cdce26d7cbe_elex_glassworm_luca-stealer_njrat_remcos_smoke-loader.exe
Resource
win10v2004-20260513-en
10 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-08-10_36db85cce4862d8dd6ef8cdce26d7cbe_elex_glassworm_luca-stealer_njrat_remcos_smoke-loader.exe
Resource
win11ltsc2024-20260709-en
10 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-08-10_36db85cce4862d8dd6ef8cdce26d7cbe_elex_glassworm_luca-stealer_njrat_remcos_smoke-loader
- Size 6.2MB
- SHA256 6adf1b4d5448200e092d73a2c9d84e935e2a145598ffc1ccd256f92f2c866dff
- MD5 36db85cce4862d8dd6ef8cdce26d7cbe
- SHA1 278136aba77830994514a8c4f45bfc37b0458bd5
- SHA512 983561c8e5d6f1c8a41536ca901733b8573480625e893a965138006f7eb548d580a6fd4f2a5f1a201e1a692863b67a77bbd40d026c2cae8cb80d0a6036b37560
- SSDEEP 98304:iQeMjLsAAa/7JNzJwjI5klUigKYkBEvHPILz1p/kjRm4OWL22ImljBVyjt:ZeGZF6bUpMBF1p/kjRm4OWi2bmZ
- TLSH T10966331AAC464276C233183388B2E6712E693AF51F2D54170FD52B3F1B725A17E2F8B5
- MD5 SHA1 SHA512 SSDEEP TLSH
Score7/10-
ACProtect 1.3x - 1.4x DLL software
Detects file using ACProtect software.
-
Executes dropped EXE
-
Loads dropped DLL
-
Drops file in System32 directory