General
- Target 2026-04-19_854159060657de4aaf23f67bb279f278_coinminer_elex_glassworm_remcos_smoke-loader_stealc_stop_tofsee
- Size 973KB
- Sample260419-eakhgab15j
- SHA256 50b598681a94abdafe1dbf636d1d0338c76b904aa48835c256c9a6ba919bcbbf
- MD5 854159060657de4aaf23f67bb279f278
- SHA1 abe7cd9c7fbf6482899ebd9ae2e41ced80079aa6
- SHA512 95e2647af24ef74f049f79ef7d9a18d2a1a336cb8876be250eb408f52b09fd3fbe6a67dc1b90a0ef0d098628602ac609f387a815fd1e7e40cda4bb49aa6a29bf
- SSDEEP 12288:twKfOVRo9yRY1lLmM4O8b8ITDnlI0quawvG/4:txWVeyRYDLmM4O8b8ITDnlQuU/4
- TLSH T1F3250932F1D4C020D4A636344D6F8EA43626BC526EE187D7369C3B4EAF716B1ED2531A
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
6/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-04-19_854159060657de4aaf23f67bb279f278_coinminer_elex_glassworm_remcos_smoke-loader_stealc_stop_tofsee.exe
Resource
win10v2004-20260130-en
8 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-04-19_854159060657de4aaf23f67bb279f278_coinminer_elex_glassworm_remcos_smoke-loader_stealc_stop_tofsee.exe
Resource
win11-20260130-en
8 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-04-19_854159060657de4aaf23f67bb279f278_coinminer_elex_glassworm_remcos_smoke-loader_stealc_stop_tofsee
- Size 973KB
- SHA256 50b598681a94abdafe1dbf636d1d0338c76b904aa48835c256c9a6ba919bcbbf
- MD5 854159060657de4aaf23f67bb279f278
- SHA1 abe7cd9c7fbf6482899ebd9ae2e41ced80079aa6
- SHA512 95e2647af24ef74f049f79ef7d9a18d2a1a336cb8876be250eb408f52b09fd3fbe6a67dc1b90a0ef0d098628602ac609f387a815fd1e7e40cda4bb49aa6a29bf
- SSDEEP 12288:twKfOVRo9yRY1lLmM4O8b8ITDnlI0quawvG/4:txWVeyRYDLmM4O8b8ITDnlQuU/4
- TLSH T1F3250932F1D4C020D4A636344D6F8EA43626BC526EE187D7369C3B4EAF716B1ED2531A
- MD5 SHA1 SHA512 SSDEEP TLSH
Score6/10-
Adds Run key to start application
-
Checks installed software on the system
Looks up Uninstall key entries in the registry to enumerate software on the system.
-
Drops file in System32 directory