General
- Target 2026-08-22_827b0b982ab2a035c5489d9ad5852473_elex_glassworm_luca-stealer_njrat_remcos_smoke-loader
- Size 6.6MB
- Sample260823-ghzcpsem4x
- SHA256 72786385e6ee6bf776fe99d3a7714931d2e6be62158685af1746c74c7457f6a0
- MD5 827b0b982ab2a035c5489d9ad5852473
- SHA1 120784d4a774c373bca5f58019b76cf41e71f0f2
- SHA512 7937445d58637f544367171f8b92d1561e6dbd9a6c04ccf08ef542e33e303bce39e4e0bc437705e4cd27bdf941a108f595de08e2cef1b551390d6fd0feb49432
- SSDEEP 196608:eAqjTpnhXlmyWCZNulPKQ8hY/Bkr/fOIT/+VdlBFKazn:kfauN/HYOSIT/EVF97
- TLSH T14B663381F0938CBAE8F611371AB6D1353A7AF5230B0585AF639C5A977A303D1A77C61C
- MD5 SHA1 SHA512 SSDEEP TLSH
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-08-22_827b0b982ab2a035c5489d9ad5852473_elex_glassworm_luca-stealer_njrat_remcos_smoke-loader.exe
Resource
win10v2004-20260513-en
15 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-08-22_827b0b982ab2a035c5489d9ad5852473_elex_glassworm_luca-stealer_njrat_remcos_smoke-loader
- Size 6.6MB
- SHA256 72786385e6ee6bf776fe99d3a7714931d2e6be62158685af1746c74c7457f6a0
- MD5 827b0b982ab2a035c5489d9ad5852473
- SHA1 120784d4a774c373bca5f58019b76cf41e71f0f2
- SHA512 7937445d58637f544367171f8b92d1561e6dbd9a6c04ccf08ef542e33e303bce39e4e0bc437705e4cd27bdf941a108f595de08e2cef1b551390d6fd0feb49432
- SSDEEP 196608:eAqjTpnhXlmyWCZNulPKQ8hY/Bkr/fOIT/+VdlBFKazn:kfauN/HYOSIT/EVF97
- TLSH T14B663381F0938CBAE8F611371AB6D1353A7AF5230B0585AF639C5A977A303D1A77C61C
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Contacts a large (8167) amount of remote hosts
This may indicate a network scan to discover remotely running services.
-
Creates a large amount of network flows
This may indicate a network scan to discover remotely running services.
-
Grants admin privileges
Uses net.exe to modify the user's privileges.
-
Loads dropped DLL