General
- Target 2026-10-15_b56f65c373e23bb92767640f6c9f6954_elex_glassworm_luca-stealer_njrat_remcos_smoke-loader
- Size 6.6MB
- Sample261016-h2fv5syzev
- SHA256 d81d0417a28fdca492778f5a69ac87d489ef2bcbcc2a92696e1387cbfbf471f0
- MD5 b56f65c373e23bb92767640f6c9f6954
- SHA1 f4bd805f2bc56d7739c978fd0874bab8c610f3e6
- SHA512 20c979b40ebb338be0385c1777f1324726e5f36de10f5dd626393dee8a9e0a4cd069716630a1c60eff2faffd4e31b9512928749d42049e9e7121b5a233e07dc8
- SSDEEP 196608:eAqjTpnhXlmyWCZNulPKQ8hY/Bkr/fOIT/+VdlBFKazF:kfauN/HYOSIT/EVF95
- TLSH T161663381F0928CBAE8F611371AB6D1353E7AF5230B0585AF63AC5A9779303D1A77C61C
- MD5 SHA1 SHA512 SSDEEP TLSH
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-10-15_b56f65c373e23bb92767640f6c9f6954_elex_glassworm_luca-stealer_njrat_remcos_smoke-loader.exe
Resource
win10v2004-20260911-en
16 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-10-15_b56f65c373e23bb92767640f6c9f6954_elex_glassworm_luca-stealer_njrat_remcos_smoke-loader
- Size 6.6MB
- SHA256 d81d0417a28fdca492778f5a69ac87d489ef2bcbcc2a92696e1387cbfbf471f0
- MD5 b56f65c373e23bb92767640f6c9f6954
- SHA1 f4bd805f2bc56d7739c978fd0874bab8c610f3e6
- SHA512 20c979b40ebb338be0385c1777f1324726e5f36de10f5dd626393dee8a9e0a4cd069716630a1c60eff2faffd4e31b9512928749d42049e9e7121b5a233e07dc8
- SSDEEP 196608:eAqjTpnhXlmyWCZNulPKQ8hY/Bkr/fOIT/+VdlBFKazF:kfauN/HYOSIT/EVF95
- TLSH T161663381F0928CBAE8F611371AB6D1353E7AF5230B0585AF63AC5A9779303D1A77C61C
- MD5 SHA1 SHA512 SSDEEP TLSH
Contacts a large (7345) amount of remote hosts
This may indicate a network scan to discover remotely running services.
Creates a large amount of network flows
This may indicate a network scan to discover remotely running services.
Grants admin privileges
Uses net.exe to modify the user's privileges.
Loads dropped DLL
MITRE ATT&CK Enterprise v16
Discovery
Domain Trust Discovery
1Network Service Discovery
2Permission Groups Discovery
2Domain Groups
1Local Groups
1System Information Discovery
1System Location Discovery
1System Language Discovery
1System Network Configuration Discovery
1