General

  • Target
    2026-04-20_a19ab491f3fe27a6d75169b8884bcfff_elex_glassworm_remcos_smoke-loader_stealc_stop_tofsee
  • Size 961KB
  • Sample260420-tfprpsas2q
  • SHA256 dcab143f447c52ccf18e14aa096366b34f174ae93c994e3998acaad624294adb
  • MD5 SHA1 SHA512 SSDEEP TLSH

Malware Config

Targets

    • Target
      2026-04-20_a19ab491f3fe27a6d75169b8884bcfff_elex_glassworm_remcos_smoke-loader_stealc_stop_tofsee
    • Size 961KB
    • SHA256 dcab143f447c52ccf18e14aa096366b34f174ae93c994e3998acaad624294adb
    • MD5 SHA1 SHA512 SSDEEP TLSH
    • Adds Run key to start application

    • Checks installed software on the system

      Looks up Uninstall key entries in the registry to enumerate software on the system.

    • Drops file in System32 directory

MITRE ATT&CK Enterprise v16

Tasks