General
- Target 2026-04-18_89ec2247189a1cd54b05fe7368264e07_elex_glassworm_remcos_smoke-loader_stealc_stop_tofsee
- Size 1.9MB
- Sample260418-ec4dcsfz7v
- SHA256 b6f4e1f60b3be03d16586f5c70d505117fd8fa556bfcc9d9198ff98c5e349024
- MD5 89ec2247189a1cd54b05fe7368264e07
- SHA1 35779d9f4c914e8e02cf47d1ec8c3d1969add536
- SHA512 6033c4de91d1d4745baf388db2e3059cef940cc4879c8df3ffc24336bf3fcb38d14f30ebfa0924e840293ec4f1db30bfc4cb440ead95dc80667a1931e3a6f3c2
- SSDEEP 49152:J8Y34O8b8ITDnlnevaJmnWLFlemOHJMK3JSXyCtNlh/W4ApmU1LHkJkwtaQoQ:iY4CDcki
- TLSH T19C958D13FE948031D163EE3019BA4D90FE36BC556BA4479B314C730D6BB27A0EA6E719
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
6/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-04-18_89ec2247189a1cd54b05fe7368264e07_elex_glassworm_remcos_smoke-loader_stealc_stop_tofsee.exe
Resource
win10v2004-20260130-en
8 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-04-18_89ec2247189a1cd54b05fe7368264e07_elex_glassworm_remcos_smoke-loader_stealc_stop_tofsee.exe
Resource
win11-20260130-en
8 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-04-18_89ec2247189a1cd54b05fe7368264e07_elex_glassworm_remcos_smoke-loader_stealc_stop_tofsee
- Size 1.9MB
- SHA256 b6f4e1f60b3be03d16586f5c70d505117fd8fa556bfcc9d9198ff98c5e349024
- MD5 89ec2247189a1cd54b05fe7368264e07
- SHA1 35779d9f4c914e8e02cf47d1ec8c3d1969add536
- SHA512 6033c4de91d1d4745baf388db2e3059cef940cc4879c8df3ffc24336bf3fcb38d14f30ebfa0924e840293ec4f1db30bfc4cb440ead95dc80667a1931e3a6f3c2
- SSDEEP 49152:J8Y34O8b8ITDnlnevaJmnWLFlemOHJMK3JSXyCtNlh/W4ApmU1LHkJkwtaQoQ:iY4CDcki
- TLSH T19C958D13FE948031D163EE3019BA4D90FE36BC556BA4479B314C730D6BB27A0EA6E719
- MD5 SHA1 SHA512 SSDEEP TLSH
Score6/10-
Adds Run key to start application
-
Checks installed software on the system
Looks up Uninstall key entries in the registry to enumerate software on the system.
-
Drops file in System32 directory