General
- Target 2026-04-19_6a44632f2a7433f9b2b9bdad34099c0b_elex_glassworm_remcos_smoke-loader_stealc_stop_tofsee
- Size 1.4MB
- Sample260419-svv2laa15z
- SHA256 e0e656a007fdef9fd3e78e82018578410f1e1d2eef0af5e33ae56dd4068bb6e3
- MD5 6a44632f2a7433f9b2b9bdad34099c0b
- SHA1 1b2fa6af2b7a2c26f64d19ea3321d646f91f779f
- SHA512 049db8f3a8235d26be6c340e440b546af19c832ac73448ea9f19cab1e6fd28e593e05fde2fee2b2385a76cd96b911d7784fe7ec54b61a2c95ec85cfd785c913c
- SSDEEP 24576:lxWVeyRYbXfBxrj3d5E/jKQvVj4YpdjYY0td7kt+XWn3BbLmXf4O8b8ITDnlXoBu:l8YLBxrj3Tf4O8b8ITDnlYnOyy
- TLSH T188654A12FE9CD011D5623E3048BE4D60E536BC517EE0869B759C372DEFB23A1D82A71A
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
6/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-04-19_6a44632f2a7433f9b2b9bdad34099c0b_elex_glassworm_remcos_smoke-loader_stealc_stop_tofsee.exe
Resource
win10v2004-20260130-en
8 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-04-19_6a44632f2a7433f9b2b9bdad34099c0b_elex_glassworm_remcos_smoke-loader_stealc_stop_tofsee.exe
Resource
win11-20260130-en
8 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-04-19_6a44632f2a7433f9b2b9bdad34099c0b_elex_glassworm_remcos_smoke-loader_stealc_stop_tofsee
- Size 1.4MB
- SHA256 e0e656a007fdef9fd3e78e82018578410f1e1d2eef0af5e33ae56dd4068bb6e3
- MD5 6a44632f2a7433f9b2b9bdad34099c0b
- SHA1 1b2fa6af2b7a2c26f64d19ea3321d646f91f779f
- SHA512 049db8f3a8235d26be6c340e440b546af19c832ac73448ea9f19cab1e6fd28e593e05fde2fee2b2385a76cd96b911d7784fe7ec54b61a2c95ec85cfd785c913c
- SSDEEP 24576:lxWVeyRYbXfBxrj3d5E/jKQvVj4YpdjYY0td7kt+XWn3BbLmXf4O8b8ITDnlXoBu:l8YLBxrj3Tf4O8b8ITDnlYnOyy
- TLSH T188654A12FE9CD011D5623E3048BE4D60E536BC517EE0869B759C372DEFB23A1D82A71A
- MD5 SHA1 SHA512 SSDEEP TLSH
Score6/10-
Adds Run key to start application
-
Checks installed software on the system
Looks up Uninstall key entries in the registry to enumerate software on the system.
-
Drops file in System32 directory