General
- Target 2026-08-10_1ed9624e405f0672db009a4e6badd701_elex_glassworm_luca-stealer_njrat_remcos_smoke-loader
- Size 6.2MB
- Sample260810-2tywja1ald
- SHA256 ffd60b9a1a083401b158f50609ac238d420076c8b7899e2cabbc3acb82eb2890
- MD5 1ed9624e405f0672db009a4e6badd701
- SHA1 5834c3bb10d6ffb18ec5b476ca9576c4a7662277
- SHA512 6d45389650838428a243ff61ab69e063f3a363c85b4df3fd95c9a18794255f078ed4fef39919925fc9f1da90758ed784fdfcb3e6ed6f9c9e38e7bb099e464263
- SSDEEP 98304:CQeMjLsAAa/7JNzJwjI5klUigKYkBEvHPILz1p/kjRm4OWL22ImljBVR:5eGZF6bUpMBF1p/kjRm4OWi2bd
- TLSH T14666331AAC464276C233183388B2D6312A693AF61F2D54174FD52B3F1B735A17E2F8B5
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
7/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-08-10_1ed9624e405f0672db009a4e6badd701_elex_glassworm_luca-stealer_njrat_remcos_smoke-loader.exe
Resource
win10v2004-20260513-en
10 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-08-10_1ed9624e405f0672db009a4e6badd701_elex_glassworm_luca-stealer_njrat_remcos_smoke-loader.exe
Resource
win11ltsc2024-20260710-en
10 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-08-10_1ed9624e405f0672db009a4e6badd701_elex_glassworm_luca-stealer_njrat_remcos_smoke-loader
- Size 6.2MB
- SHA256 ffd60b9a1a083401b158f50609ac238d420076c8b7899e2cabbc3acb82eb2890
- MD5 1ed9624e405f0672db009a4e6badd701
- SHA1 5834c3bb10d6ffb18ec5b476ca9576c4a7662277
- SHA512 6d45389650838428a243ff61ab69e063f3a363c85b4df3fd95c9a18794255f078ed4fef39919925fc9f1da90758ed784fdfcb3e6ed6f9c9e38e7bb099e464263
- SSDEEP 98304:CQeMjLsAAa/7JNzJwjI5klUigKYkBEvHPILz1p/kjRm4OWL22ImljBVR:5eGZF6bUpMBF1p/kjRm4OWi2bd
- TLSH T14666331AAC464276C233183388B2D6312A693AF61F2D54174FD52B3F1B735A17E2F8B5
- MD5 SHA1 SHA512 SSDEEP TLSH
Score7/10-
ACProtect 1.3x - 1.4x DLL software
Detects file using ACProtect software.
-
Executes dropped EXE
-
Loads dropped DLL
-
Drops file in System32 directory