General
- Target 2026-09-30_1de522f7bc16ab3291882da8b52c8bff_elex_glassworm_luca-stealer_njrat_remcos_smoke-loader
- Size 6.6MB
- Sample261001-we7l8stekb
- SHA256 b05d17c98b945402ffa567f23ea53c52129892922253a6804d2202f69aa26297
- MD5 1de522f7bc16ab3291882da8b52c8bff
- SHA1 1f1e2800f27404172d7bb4acf38a5f719710d45f
- SHA512 a6697958173277ec98b913f9ba182f32aac1d49129f2ad78cf04e69f1f98efb9e003eac34ffb9582c78dfa72448939a112a81588a3a700e02434895b2285ea0a
- SSDEEP 196608:eAqjTpnhXlmyWCZNulPKQ8hY/Bkr/fOIT/+VdlBFKaz+:kfauN/HYOSIT/EVF9q
- TLSH T189663381F0928CBAE8F611371AB6D1353E7AF5230B0585AF63AC5A9779303D1A77C61C
- MD5 SHA1 SHA512 SSDEEP TLSH
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-09-30_1de522f7bc16ab3291882da8b52c8bff_elex_glassworm_luca-stealer_njrat_remcos_smoke-loader.exe
Resource
win10v2004-20260911-en
17 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-09-30_1de522f7bc16ab3291882da8b52c8bff_elex_glassworm_luca-stealer_njrat_remcos_smoke-loader
- Size 6.6MB
- SHA256 b05d17c98b945402ffa567f23ea53c52129892922253a6804d2202f69aa26297
- MD5 1de522f7bc16ab3291882da8b52c8bff
- SHA1 1f1e2800f27404172d7bb4acf38a5f719710d45f
- SHA512 a6697958173277ec98b913f9ba182f32aac1d49129f2ad78cf04e69f1f98efb9e003eac34ffb9582c78dfa72448939a112a81588a3a700e02434895b2285ea0a
- SSDEEP 196608:eAqjTpnhXlmyWCZNulPKQ8hY/Bkr/fOIT/+VdlBFKaz+:kfauN/HYOSIT/EVF9q
- TLSH T189663381F0928CBAE8F611371AB6D1353E7AF5230B0585AF63AC5A9779303D1A77C61C
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Contacts a large (7648) amount of remote hosts
This may indicate a network scan to discover remotely running services.
-
Creates a large amount of network flows
This may indicate a network scan to discover remotely running services.
-
Grants admin privileges
Uses net.exe to modify the user's privileges.
-
Loads dropped DLL
-
Enumerates connected drives
Attempts to read the root path of hard drives other than the default C: drive.
MITRE ATT&CK Enterprise v16
Discovery
Domain Trust Discovery
1Network Service Discovery
2Peripheral Device Discovery
1Permission Groups Discovery
2Domain Groups
1Local Groups
1Query Registry
1System Information Discovery
2System Location Discovery
1System Language Discovery
1System Network Configuration Discovery
1