General
- Target 2026-04-18_56aff10d3c72d52f70acdb87490f09bd_elex_glassworm_remcos_smoke-loader_stealc_stop_tofsee
- Size 1.4MB
- Sample260418-wffvxady8l
- SHA256 e98b65bcec25f36a4d4eaef027c06d1d8a1381bd103b7a3170652c0e8ae71bd9
- MD5 56aff10d3c72d52f70acdb87490f09bd
- SHA1 2a83607ac4a42fe6a02ec6846c0486a45a17ff3e
- SHA512 aa732eee11d074b2203b29aee7a2e6e5fd22c54244c21b2a08d48c39cd64cefec3d257538c6effe0296d21b5e9798f0c3670215937a7d692fb3189c4aab45dbf
- SSDEEP 12288:lwKfOVRo9yRYCUDLm34O8b8ITDnlD0N2eMfA2dGRtfU:lxWVeyRYzDLm34O8b8ITDnlCJM4VfU
- TLSH T1EB65B712A3E48114F5B33F3099B94AB4EA367C51AEB9C64F3248374E2FB1790D925727
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
6/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-04-18_56aff10d3c72d52f70acdb87490f09bd_elex_glassworm_remcos_smoke-loader_stealc_stop_tofsee.exe
Resource
win10v2004-20260130-en
8 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-04-18_56aff10d3c72d52f70acdb87490f09bd_elex_glassworm_remcos_smoke-loader_stealc_stop_tofsee.exe
Resource
win11-20260130-en
8 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-04-18_56aff10d3c72d52f70acdb87490f09bd_elex_glassworm_remcos_smoke-loader_stealc_stop_tofsee
- Size 1.4MB
- SHA256 e98b65bcec25f36a4d4eaef027c06d1d8a1381bd103b7a3170652c0e8ae71bd9
- MD5 56aff10d3c72d52f70acdb87490f09bd
- SHA1 2a83607ac4a42fe6a02ec6846c0486a45a17ff3e
- SHA512 aa732eee11d074b2203b29aee7a2e6e5fd22c54244c21b2a08d48c39cd64cefec3d257538c6effe0296d21b5e9798f0c3670215937a7d692fb3189c4aab45dbf
- SSDEEP 12288:lwKfOVRo9yRYCUDLm34O8b8ITDnlD0N2eMfA2dGRtfU:lxWVeyRYzDLm34O8b8ITDnlCJM4VfU
- TLSH T1EB65B712A3E48114F5B33F3099B94AB4EA367C51AEB9C64F3248374E2FB1790D925727
- MD5 SHA1 SHA512 SSDEEP TLSH
Score6/10-
Adds Run key to start application
-
Checks installed software on the system
Looks up Uninstall key entries in the registry to enumerate software on the system.
-
Drops file in System32 directory