General
- Target 2026-08-19_ee05f872f58c0b82a7e6f07a6920ec9d_elex_glassworm_luca-stealer_njrat_remcos_smoke-loader
- Size 6.6MB
- Sample260819-rr253awdpd
- SHA256 a526f04c7dc1b8af3bcbbde300745ead516448fd5554ebe5bc31ae5c6bacb74f
- MD5 ee05f872f58c0b82a7e6f07a6920ec9d
- SHA1 1dc003873352d1c9c73adbe88122cfaec4b8d7ab
- SHA512 5443bdec0b8f584fc37a3fe03acc5898d6f946c9135e147cf7a05012324bf69a37975cc8c27e1bb7b45c01a60cbd695f7d110717794a4f2d93f34f1b99b46917
- SSDEEP 196608:eAqjTpnhXlmyWCZNulPKQ8hY/Bkr/fOIT/+VdlBFKazA:kfauN/HYOSIT/EVF98
- TLSH T1C2663381F0928CBAE8F611371AB6D1353E7AF5230B0585AF639C5A977A303D1A77C61C
- MD5 SHA1 SHA512 SSDEEP TLSH
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-08-19_ee05f872f58c0b82a7e6f07a6920ec9d_elex_glassworm_luca-stealer_njrat_remcos_smoke-loader.exe
Resource
win10v2004-20260513-en
16 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-08-19_ee05f872f58c0b82a7e6f07a6920ec9d_elex_glassworm_luca-stealer_njrat_remcos_smoke-loader
- Size 6.6MB
- SHA256 a526f04c7dc1b8af3bcbbde300745ead516448fd5554ebe5bc31ae5c6bacb74f
- MD5 ee05f872f58c0b82a7e6f07a6920ec9d
- SHA1 1dc003873352d1c9c73adbe88122cfaec4b8d7ab
- SHA512 5443bdec0b8f584fc37a3fe03acc5898d6f946c9135e147cf7a05012324bf69a37975cc8c27e1bb7b45c01a60cbd695f7d110717794a4f2d93f34f1b99b46917
- SSDEEP 196608:eAqjTpnhXlmyWCZNulPKQ8hY/Bkr/fOIT/+VdlBFKazA:kfauN/HYOSIT/EVF98
- TLSH T1C2663381F0928CBAE8F611371AB6D1353E7AF5230B0585AF639C5A977A303D1A77C61C
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Contacts a large (7650) amount of remote hosts
This may indicate a network scan to discover remotely running services.
-
Creates a large amount of network flows
This may indicate a network scan to discover remotely running services.
-
Grants admin privileges
Uses net.exe to modify the user's privileges.
-
Loads dropped DLL