General
- Target 2026-10-01_d54b8e6952c21000b7e205cc4c869f50_elex_glassworm_luca-stealer_njrat_remcos_smoke-loader
- Size 6.6MB
- Sample261002-bsgmratare
- SHA256 3d8e1a8eacf4f061b654f5935aae826eb37e554509dc1b96a2f7f97eb43eff71
- MD5 d54b8e6952c21000b7e205cc4c869f50
- SHA1 6f7f31935e7b975a4012723ce1d08ccc13b0cd7c
- SHA512 14926d636538227fa48e2c1c927b53689a6ca7d170d9edd3c69281b81b61d084831180bce44b2226e052f349990de489abd63254975bcde0956b7f6aefa40d37
- SSDEEP 196608:eAqjTpnhXlmyWCZNulPKQ8hY/Bkr/fOIT/+VdlBFKazN:kfauN/HYOSIT/EVF9B
- TLSH T1CA663381F0938CBAE8F611371AB6D1353A7AF5230B0585AF639C5A977A303D1A77C61C
- MD5 SHA1 SHA512 SSDEEP TLSH
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-10-01_d54b8e6952c21000b7e205cc4c869f50_elex_glassworm_luca-stealer_njrat_remcos_smoke-loader.exe
Resource
win10v2004-20260911-en
17 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-10-01_d54b8e6952c21000b7e205cc4c869f50_elex_glassworm_luca-stealer_njrat_remcos_smoke-loader
- Size 6.6MB
- SHA256 3d8e1a8eacf4f061b654f5935aae826eb37e554509dc1b96a2f7f97eb43eff71
- MD5 d54b8e6952c21000b7e205cc4c869f50
- SHA1 6f7f31935e7b975a4012723ce1d08ccc13b0cd7c
- SHA512 14926d636538227fa48e2c1c927b53689a6ca7d170d9edd3c69281b81b61d084831180bce44b2226e052f349990de489abd63254975bcde0956b7f6aefa40d37
- SSDEEP 196608:eAqjTpnhXlmyWCZNulPKQ8hY/Bkr/fOIT/+VdlBFKazN:kfauN/HYOSIT/EVF9B
- TLSH T1CA663381F0938CBAE8F611371AB6D1353A7AF5230B0585AF639C5A977A303D1A77C61C
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Contacts a large (8000) amount of remote hosts
This may indicate a network scan to discover remotely running services.
-
Creates a large amount of network flows
This may indicate a network scan to discover remotely running services.
-
Grants admin privileges
Uses net.exe to modify the user's privileges.
-
Loads dropped DLL
-
Enumerates connected drives
Attempts to read the root path of hard drives other than the default C: drive.
MITRE ATT&CK Enterprise v16
Discovery
Domain Trust Discovery
1Network Service Discovery
2Peripheral Device Discovery
1Permission Groups Discovery
2Domain Groups
1Local Groups
1Query Registry
1System Information Discovery
2System Location Discovery
1System Language Discovery
1System Network Configuration Discovery
1