General
- Target 2026-04-16_8399934409a144dec0f62c87f3f9010b_elex_glassworm_remcos_smoke-loader_stealc_stop_tofsee
- Size 1.6MB
- Sample260416-d3grlsas7s
- SHA256 64f6b19e2322831d133e26c66fb5c5719cd0041c24e6ae4ba670570ce91c41e2
- MD5 8399934409a144dec0f62c87f3f9010b
- SHA1 f1224c1156d95da2356713ed9e45147da0bc0f30
- SHA512 25b9c87063d28036f686802f0e0de7f120fba56f2892e8b02c02fc76783f19c9cf533229faabbb57d31ee94c5d8035e687d967255f4c5b83d09eeb402773f66b
- SSDEEP 24576:XxWVeyRYEv4s2hzntVIJqg744O8b8ITDnlOG2Jxe10Fg7:X8YEzuzntVxz4O8b8ITDnlOtJx8f
- TLSH T1B9751721A6E94F10F0BB763099B5855426677C569F7583CF718C3F0A7B74AA0CA32B23
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
6/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-04-16_8399934409a144dec0f62c87f3f9010b_elex_glassworm_remcos_smoke-loader_stealc_stop_tofsee.exe
Resource
win10v2004-20260130-en
8 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-04-16_8399934409a144dec0f62c87f3f9010b_elex_glassworm_remcos_smoke-loader_stealc_stop_tofsee.exe
Resource
win11-20260130-en
8 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-04-16_8399934409a144dec0f62c87f3f9010b_elex_glassworm_remcos_smoke-loader_stealc_stop_tofsee
- Size 1.6MB
- SHA256 64f6b19e2322831d133e26c66fb5c5719cd0041c24e6ae4ba670570ce91c41e2
- MD5 8399934409a144dec0f62c87f3f9010b
- SHA1 f1224c1156d95da2356713ed9e45147da0bc0f30
- SHA512 25b9c87063d28036f686802f0e0de7f120fba56f2892e8b02c02fc76783f19c9cf533229faabbb57d31ee94c5d8035e687d967255f4c5b83d09eeb402773f66b
- SSDEEP 24576:XxWVeyRYEv4s2hzntVIJqg744O8b8ITDnlOG2Jxe10Fg7:X8YEzuzntVxz4O8b8ITDnlOtJx8f
- TLSH T1B9751721A6E94F10F0BB763099B5855426677C569F7583CF718C3F0A7B74AA0CA32B23
- MD5 SHA1 SHA512 SSDEEP TLSH
Score6/10-
Adds Run key to start application
-
Checks installed software on the system
Looks up Uninstall key entries in the registry to enumerate software on the system.
-
Drops file in System32 directory