General
- Target 2026-04-20_a19ab491f3fe27a6d75169b8884bcfff_elex_glassworm_remcos_smoke-loader_stealc_stop_tofsee
- Size 961KB
- Sample260420-tfprpsas2q
- SHA256 dcab143f447c52ccf18e14aa096366b34f174ae93c994e3998acaad624294adb
- MD5 a19ab491f3fe27a6d75169b8884bcfff
- SHA1 170e537c74caed1c8e541e8c444550a6304f09ac
- SHA512 d053debaf67ec2b4bc8d11e7f6bb0695227d107ec3bd14fae8996ca80ebea55dee39a251e26dc4afe1d56b498add525d7fa59e92deafce209264381e8f74ea51
- SSDEEP 12288:xwKfOVRo9yRYnnNFLmA4O8b8ITDnls0LvFy:xxWVeyRYnNFLmA4O8b8ITDnlXy
- TLSH T1E7251B22F1D0C010E6663F30096ACDA4F936BC116AE4979BB65C3B1D6F717A2DD2631E
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
6/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-04-20_a19ab491f3fe27a6d75169b8884bcfff_elex_glassworm_remcos_smoke-loader_stealc_stop_tofsee.exe
Resource
win10v2004-20260130-en
8 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-04-20_a19ab491f3fe27a6d75169b8884bcfff_elex_glassworm_remcos_smoke-loader_stealc_stop_tofsee.exe
Resource
win11-20260130-en
8 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-04-20_a19ab491f3fe27a6d75169b8884bcfff_elex_glassworm_remcos_smoke-loader_stealc_stop_tofsee
- Size 961KB
- SHA256 dcab143f447c52ccf18e14aa096366b34f174ae93c994e3998acaad624294adb
- MD5 a19ab491f3fe27a6d75169b8884bcfff
- SHA1 170e537c74caed1c8e541e8c444550a6304f09ac
- SHA512 d053debaf67ec2b4bc8d11e7f6bb0695227d107ec3bd14fae8996ca80ebea55dee39a251e26dc4afe1d56b498add525d7fa59e92deafce209264381e8f74ea51
- SSDEEP 12288:xwKfOVRo9yRYnnNFLmA4O8b8ITDnls0LvFy:xxWVeyRYnNFLmA4O8b8ITDnlXy
- TLSH T1E7251B22F1D0C010E6663F30096ACDA4F936BC116AE4979BB65C3B1D6F717A2DD2631E
- MD5 SHA1 SHA512 SSDEEP TLSH
Score6/10-
Adds Run key to start application
-
Checks installed software on the system
Looks up Uninstall key entries in the registry to enumerate software on the system.
-
Drops file in System32 directory