General
- Target 2026-09-12_4f8692e8fb5ec92453283e1edc6728b7_elex_glassworm_luca-stealer_njrat_remcos_smoke-loader
- Size 8.5MB
- Sample260913-cfccyazdla
- SHA256 6a797f8be169bee58f8d6c459bd2541b7ff630db46065675f4cf74b0fdb37338
- MD5 4f8692e8fb5ec92453283e1edc6728b7
- SHA1 17de2e13d5f787a93ac80c108cc024e2310441c1
- SHA512 38bc561ba7987ffa5a3e2e280fedc039d6e98f0088a69e921973cc2d6c1ff344a4ae15327486ee344599f3b857ec59551be52ddaf8ad5acbf168d8a9dbd0d97c
- SSDEEP 98304:mcUgTH2ixQeMjLsAAa/7JNzJwjI5klUigKYkBEvHPILz1p/kjRm4OWL22ImljBVt:mbgTH2BeGZF6bUpMBF1p/kjRm4OWi2bZ
- TLSH T19896BF12654A6F2CD54FE4B4CB4B89252A277C8A0F247BFF4685BD313AB56F42F28107
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
10/10
Behavioral task
behavioral1
Sample
2026-09-12_4f8692e8fb5ec92453283e1edc6728b7_elex_glassworm_luca-stealer_njrat_remcos_smoke-loader.exe
Resource
win10v2004-20260911-en
11 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-09-12_4f8692e8fb5ec92453283e1edc6728b7_elex_glassworm_luca-stealer_njrat_remcos_smoke-loader.exe
Resource
win11ltsc2024-20260911-en
11 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-09-12_4f8692e8fb5ec92453283e1edc6728b7_elex_glassworm_luca-stealer_njrat_remcos_smoke-loader
- Size 8.5MB
- SHA256 6a797f8be169bee58f8d6c459bd2541b7ff630db46065675f4cf74b0fdb37338
- MD5 4f8692e8fb5ec92453283e1edc6728b7
- SHA1 17de2e13d5f787a93ac80c108cc024e2310441c1
- SHA512 38bc561ba7987ffa5a3e2e280fedc039d6e98f0088a69e921973cc2d6c1ff344a4ae15327486ee344599f3b857ec59551be52ddaf8ad5acbf168d8a9dbd0d97c
- SSDEEP 98304:mcUgTH2ixQeMjLsAAa/7JNzJwjI5klUigKYkBEvHPILz1p/kjRm4OWL22ImljBVt:mbgTH2BeGZF6bUpMBF1p/kjRm4OWi2bZ
- TLSH T19896BF12654A6F2CD54FE4B4CB4B89252A277C8A0F247BFF4685BD313AB56F42F28107
- MD5 SHA1 SHA512 SSDEEP TLSH
Score9/10-
Detects executables packed with ASPack
-
Executes dropped EXE
-
Loads dropped DLL
-
Adds Run key to start application