General
- Target 2026-04-20_890897ea4f17f6a0e70e868f1a57032e_elex_glassworm_remcos_smoke-loader_stealc_stop_tofsee
- Size 2.1MB
- Sample260420-eflbysct31
- SHA256 ff071387f19c1ff28d40726f63993a017223df37634a83559afaa026dc818d57
- MD5 890897ea4f17f6a0e70e868f1a57032e
- SHA1 ae85373d640f618ec9adf7798cd5bbc595713b9f
- SHA512 09fe0776d9e262e005f55e8d0d4a0e3f72a2527265c39490650334825a01fa27a84193d163bafbac5f3916f3d14c49886c80577e22e838f3c6e084286c4340d9
- SSDEEP 49152:08Y0WevaJmnWLFlemOHJMK3JSXyCtNlh/WnApmU1LHkJk4taQoZ:9/545Dskj
- TLSH T1C7A52A02BFE94125F1B3EF309ABA4190DF36BC516F39C64F3548314D1A72B909A6E726
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
6/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-04-20_890897ea4f17f6a0e70e868f1a57032e_elex_glassworm_remcos_smoke-loader_stealc_stop_tofsee.exe
Resource
win10v2004-20260130-en
8 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-04-20_890897ea4f17f6a0e70e868f1a57032e_elex_glassworm_remcos_smoke-loader_stealc_stop_tofsee.exe
Resource
win11-20260130-en
8 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-04-20_890897ea4f17f6a0e70e868f1a57032e_elex_glassworm_remcos_smoke-loader_stealc_stop_tofsee
- Size 2.1MB
- SHA256 ff071387f19c1ff28d40726f63993a017223df37634a83559afaa026dc818d57
- MD5 890897ea4f17f6a0e70e868f1a57032e
- SHA1 ae85373d640f618ec9adf7798cd5bbc595713b9f
- SHA512 09fe0776d9e262e005f55e8d0d4a0e3f72a2527265c39490650334825a01fa27a84193d163bafbac5f3916f3d14c49886c80577e22e838f3c6e084286c4340d9
- SSDEEP 49152:08Y0WevaJmnWLFlemOHJMK3JSXyCtNlh/WnApmU1LHkJk4taQoZ:9/545Dskj
- TLSH T1C7A52A02BFE94125F1B3EF309ABA4190DF36BC516F39C64F3548314D1A72B909A6E726
- MD5 SHA1 SHA512 SSDEEP TLSH
Score6/10-
Adds Run key to start application
-
Checks installed software on the system
Looks up Uninstall key entries in the registry to enumerate software on the system.
-
Drops file in System32 directory