General
- Target 2026-08-20_c48ec71e7dab7ad105162109af9c4af0_elex_glassworm_luca-stealer_njrat_remcos_rhadamanthys_smoke-loader
- Size 6.2MB
- Sample260820-ry8lesdh53
- SHA256 1dad97e1f38d218d0001ab5031611f364cff29edb796a0197ce5d855a2d689cd
- MD5 c48ec71e7dab7ad105162109af9c4af0
- SHA1 adf6030a1c98aeda9a99a5f63d804444d9de47e9
- SHA512 51fd73515e81aed93d3d27be55139cf86101f81049f1470959fd46fd2f7db536638942eb8631ff6660ef1b6be7515368d0f765603efaecbfcb9c549cb3432950
- SSDEEP 98304:AxQeMPLsAAa/7JNzJwjI5klUigKYkBEvHPILz1p/kjRm4OWL22ImljBV:Xe2ZF6bUpMBF1p/kjRm4OWi2b
- TLSH T1B066332AAC868176C273183248B2D6712A7A3AF60F2854574BD51F3F1F721B17D3F4A9
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
7/10
Behavioral task
behavioral1
Sample
2026-08-20_c48ec71e7dab7ad105162109af9c4af0_elex_glassworm_luca-stealer_njrat_remcos_rhadamanthys_smoke-loader.exe
Resource
win10v2004-20260513-en
9 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-08-20_c48ec71e7dab7ad105162109af9c4af0_elex_glassworm_luca-stealer_njrat_remcos_rhadamanthys_smoke-loader.exe
Resource
win11ltsc2024-20260709-en
8 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-08-20_c48ec71e7dab7ad105162109af9c4af0_elex_glassworm_luca-stealer_njrat_remcos_rhadamanthys_smoke-loader
- Size 6.2MB
- SHA256 1dad97e1f38d218d0001ab5031611f364cff29edb796a0197ce5d855a2d689cd
- MD5 c48ec71e7dab7ad105162109af9c4af0
- SHA1 adf6030a1c98aeda9a99a5f63d804444d9de47e9
- SHA512 51fd73515e81aed93d3d27be55139cf86101f81049f1470959fd46fd2f7db536638942eb8631ff6660ef1b6be7515368d0f765603efaecbfcb9c549cb3432950
- SSDEEP 98304:AxQeMPLsAAa/7JNzJwjI5klUigKYkBEvHPILz1p/kjRm4OWL22ImljBV:Xe2ZF6bUpMBF1p/kjRm4OWi2b
- TLSH T1B066332AAC868176C273183248B2D6712A7A3AF60F2854574BD51F3F1F721B17D3F4A9
- MD5 SHA1 SHA512 SSDEEP TLSH
Score7/10-
Executes dropped EXE
-
Loads dropped DLL
-
Enumerates connected drives
Attempts to read the root path of hard drives other than the default C: drive.
-
Modifies WinLogon