General
- Target 2026-10-03_e5e8447917f65387c7716459bac0b1ef_elex_glassworm_luca-stealer_njrat_remcos_smoke-loader
- Size 6.6MB
- Sample261005-2n7w9aws4n
- SHA256 8e2d75001015009fc12f5e60944bcc7863ae28275d00e140768b0bb08587e2c3
- MD5 e5e8447917f65387c7716459bac0b1ef
- SHA1 e4f2d39c9f62c50c016ea4b57e7a0424b56da0d7
- SHA512 16533413dd5253047516cc5daaf0682a6f320a14505048c4ea8b3a8e101540f6c5aadd3f81e4cf096ec46d1fe7470a5b93ec4ffcb00eec345040f16bad14d542
- SSDEEP 196608:eAqjTpnhXlmyWCZNulPKQ8hY/Bkr/fOIT/+VdlBFKazH:kfauN/HYOSIT/EVF9j
- TLSH T172663381F0938CBAE8F611371AB6D1353A7AF5230B0585AF639C5A977A303D1A77C61C
- MD5 SHA1 SHA512 SSDEEP TLSH
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-10-03_e5e8447917f65387c7716459bac0b1ef_elex_glassworm_luca-stealer_njrat_remcos_smoke-loader.exe
Resource
win10v2004-20260911-en
17 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-10-03_e5e8447917f65387c7716459bac0b1ef_elex_glassworm_luca-stealer_njrat_remcos_smoke-loader
- Size 6.6MB
- SHA256 8e2d75001015009fc12f5e60944bcc7863ae28275d00e140768b0bb08587e2c3
- MD5 e5e8447917f65387c7716459bac0b1ef
- SHA1 e4f2d39c9f62c50c016ea4b57e7a0424b56da0d7
- SHA512 16533413dd5253047516cc5daaf0682a6f320a14505048c4ea8b3a8e101540f6c5aadd3f81e4cf096ec46d1fe7470a5b93ec4ffcb00eec345040f16bad14d542
- SSDEEP 196608:eAqjTpnhXlmyWCZNulPKQ8hY/Bkr/fOIT/+VdlBFKazH:kfauN/HYOSIT/EVF9j
- TLSH T172663381F0938CBAE8F611371AB6D1353A7AF5230B0585AF639C5A977A303D1A77C61C
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Contacts a large (7425) amount of remote hosts
This may indicate a network scan to discover remotely running services.
-
Creates a large amount of network flows
This may indicate a network scan to discover remotely running services.
-
Grants admin privileges
Uses net.exe to modify the user's privileges.
-
Loads dropped DLL
-
Enumerates connected drives
Attempts to read the root path of hard drives other than the default C: drive.
MITRE ATT&CK Enterprise v16
Discovery
Domain Trust Discovery
1Network Service Discovery
2Peripheral Device Discovery
1Permission Groups Discovery
2Domain Groups
1Local Groups
1Query Registry
1System Information Discovery
2System Location Discovery
1System Language Discovery
1System Network Configuration Discovery
1