General
- Target 2026-04-19_0962861a8cf8480d7ad766dda40b5cdb_coinminer_elex_glassworm_remcos_smoke-loader_stealc_stop_tofsee
- Size 1.1MB
- Sample260419-17rtpsay5l
- SHA256 efa2800f3a965e6a646c6ff9890ccc2d11f6d242bccf0c6bf46e37793ca71f87
- MD5 0962861a8cf8480d7ad766dda40b5cdb
- SHA1 0c28a6c883223f776b844ed97027bc410e4f0c7a
- SHA512 207b39a25c9a67b900d8ef1251da743db7865b3783416b9d06c67aed9c564caf7d64f2b6338673e213fa67c5d4c14afe1cfda35ebbc17aa31e9bf59a8016b4eb
- SSDEEP 12288:3wKfOVRo9yRYOXPL4O8b8ITDnl201Ni7UxWEbVz3SdgpRRuLI4/r:3xWVeyRYO/L4O8b8ITDnlLiQxbAYR6/r
- TLSH T158353920B6D0D421E56276344D768EA53A25BC265FE0968F3ACCB72F7F325B0CC21766
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
6/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-04-19_0962861a8cf8480d7ad766dda40b5cdb_coinminer_elex_glassworm_remcos_smoke-loader_stealc_stop_tofsee.exe
Resource
win10v2004-20260130-en
8 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-04-19_0962861a8cf8480d7ad766dda40b5cdb_coinminer_elex_glassworm_remcos_smoke-loader_stealc_stop_tofsee.exe
Resource
win11-20260130-en
8 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-04-19_0962861a8cf8480d7ad766dda40b5cdb_coinminer_elex_glassworm_remcos_smoke-loader_stealc_stop_tofsee
- Size 1.1MB
- SHA256 efa2800f3a965e6a646c6ff9890ccc2d11f6d242bccf0c6bf46e37793ca71f87
- MD5 0962861a8cf8480d7ad766dda40b5cdb
- SHA1 0c28a6c883223f776b844ed97027bc410e4f0c7a
- SHA512 207b39a25c9a67b900d8ef1251da743db7865b3783416b9d06c67aed9c564caf7d64f2b6338673e213fa67c5d4c14afe1cfda35ebbc17aa31e9bf59a8016b4eb
- SSDEEP 12288:3wKfOVRo9yRYOXPL4O8b8ITDnl201Ni7UxWEbVz3SdgpRRuLI4/r:3xWVeyRYO/L4O8b8ITDnlLiQxbAYR6/r
- TLSH T158353920B6D0D421E56276344D768EA53A25BC265FE0968F3ACCB72F7F325B0CC21766
- MD5 SHA1 SHA512 SSDEEP TLSH
Score6/10Adds Run key to start application
Checks installed software on the system
Looks up Uninstall key entries in the registry to enumerate software on the system.
Drops file in System32 directory