General
- Target 2026-08-19_4c1e07fc99c2257b057a1fd7a1dfcea4_elex_glassworm_luca-stealer_njrat
- Size 3.6MB
- Sample260819-2wva5avfpg
- SHA256 a3667fb6487ab20d4a39545cc74c1733f50e67038bb8273bfe55c33d3157c430
- MD5 4c1e07fc99c2257b057a1fd7a1dfcea4
- SHA1 511d248b5ca80789fca806233055942b2d08ed03
- SHA512 41b29a7574898de900e3c4232e1d1e51a8e538530a51e948cf67701075ea03f00144bcfd6a8b8e5667405957547e312707b39170913a9646a5f0bdb2837a61d8
- SSDEEP 98304:CNmN+tqJNLc1PHyN2oawRPenm/0OZ3L/OrbjoYo:CYItqJdcpSN2o1PsOADVo
- TLSH T11D068D2236C481F9E34292708D98BAAC07ACAF7893FF54F777A518E949319C17525B0F
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
7/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-08-19_4c1e07fc99c2257b057a1fd7a1dfcea4_elex_glassworm_luca-stealer_njrat.exe
Resource
win10v2004-20260513-en
20 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-08-19_4c1e07fc99c2257b057a1fd7a1dfcea4_elex_glassworm_luca-stealer_njrat.exe
Resource
win11ltsc2024-20260710-en
18 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-08-19_4c1e07fc99c2257b057a1fd7a1dfcea4_elex_glassworm_luca-stealer_njrat
- Size 3.6MB
- SHA256 a3667fb6487ab20d4a39545cc74c1733f50e67038bb8273bfe55c33d3157c430
- MD5 4c1e07fc99c2257b057a1fd7a1dfcea4
- SHA1 511d248b5ca80789fca806233055942b2d08ed03
- SHA512 41b29a7574898de900e3c4232e1d1e51a8e538530a51e948cf67701075ea03f00144bcfd6a8b8e5667405957547e312707b39170913a9646a5f0bdb2837a61d8
- SSDEEP 98304:CNmN+tqJNLc1PHyN2oawRPenm/0OZ3L/OrbjoYo:CYItqJdcpSN2o1PsOADVo
- TLSH T11D068D2236C481F9E34292708D98BAAC07ACAF7893FF54F777A518E949319C17525B0F
- MD5 SHA1 SHA512 SSDEEP TLSH
Score7/10-
Unsecured Credentials: Credentials In Files
Steal credentials from unsecured files.
-
Accesses cryptocurrency files/wallets, possible credential harvesting
-
Suspicious use of SetThreadContext
MITRE ATT&CK Enterprise v16
Credential Access
Credentials from Password Stores
1Credentials from Web Browsers
1Unsecured Credentials
3Credentials In Files
3