General
- Target 2026-10-03_ecb5fd3f6f228771dfa5a3cb70aa7e13_elex_glassworm_luca-stealer_njrat_remcos_smoke-loader
- Size 6.6MB
- Sample261004-apd7sazdqa
- SHA256 1508de7f9de74aa49a05345b3ea3c4bed65b10414b03e40859d970b0c70f9096
- MD5 ecb5fd3f6f228771dfa5a3cb70aa7e13
- SHA1 be7671555ccfde3516c0f285d4dcaa9c3dc01fc9
- SHA512 a7beee919cc0cea246cedf352dca47e820d8ed24d705bb47816a8bdb08e6b229263258311a65ee18a555525b22b452bd7c39f8fa7749a7e1bad966bc2e400679
- SSDEEP 196608:eAqjTpnhXlmyWCZNulPKQ8hY/Bkr/fOIT/+VdlBFKazo:kfauN/HYOSIT/EVF9E
- TLSH T158663381F0928CBAE8F611371AB6D1353A7AF5230B0585AF639C5A977A303D1A77C61C
- MD5 SHA1 SHA512 SSDEEP TLSH
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-10-03_ecb5fd3f6f228771dfa5a3cb70aa7e13_elex_glassworm_luca-stealer_njrat_remcos_smoke-loader.exe
Resource
win10v2004-20260911-en
17 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-10-03_ecb5fd3f6f228771dfa5a3cb70aa7e13_elex_glassworm_luca-stealer_njrat_remcos_smoke-loader
- Size 6.6MB
- SHA256 1508de7f9de74aa49a05345b3ea3c4bed65b10414b03e40859d970b0c70f9096
- MD5 ecb5fd3f6f228771dfa5a3cb70aa7e13
- SHA1 be7671555ccfde3516c0f285d4dcaa9c3dc01fc9
- SHA512 a7beee919cc0cea246cedf352dca47e820d8ed24d705bb47816a8bdb08e6b229263258311a65ee18a555525b22b452bd7c39f8fa7749a7e1bad966bc2e400679
- SSDEEP 196608:eAqjTpnhXlmyWCZNulPKQ8hY/Bkr/fOIT/+VdlBFKazo:kfauN/HYOSIT/EVF9E
- TLSH T158663381F0928CBAE8F611371AB6D1353A7AF5230B0585AF639C5A977A303D1A77C61C
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Contacts a large (7910) amount of remote hosts
This may indicate a network scan to discover remotely running services.
-
Creates a large amount of network flows
This may indicate a network scan to discover remotely running services.
-
Grants admin privileges
Uses net.exe to modify the user's privileges.
-
Loads dropped DLL
-
Enumerates connected drives
Attempts to read the root path of hard drives other than the default C: drive.
MITRE ATT&CK Enterprise v16
Discovery
Domain Trust Discovery
1Network Service Discovery
2Peripheral Device Discovery
1Permission Groups Discovery
2Domain Groups
1Local Groups
1Query Registry
1System Information Discovery
2System Location Discovery
1System Language Discovery
1System Network Configuration Discovery
1