General
- Target 2026-04-21_93dcbb0aed1bd91fdb925ebcb20d897b_elex_glassworm_remcos_smoke-loader_stealc_stop_tofsee
- Size 1.4MB
- Sample260421-esbchsbv4x
- SHA256 38098f69114acd4144f86099c3d46101cfce434d47a1050376da1b34d1780d99
- MD5 93dcbb0aed1bd91fdb925ebcb20d897b
- SHA1 2f5a1b7b14836f860b753449ba02871345207482
- SHA512 7aaf12bd93ebe4ad3c967529a8891fcda13bf58f62a2b709c509f63ce497271e73a782f9649916ad756053f1e430a7a08c0aeebc57a4bb798911be10c55e06a1
- SSDEEP 12288:/wKfOVRo9yRY48bwzYDteYIpREn0fbl1I7u+BcysVFB:/xWVeyRY40wzYDteYIp6iyPBAB
- TLSH T1CF65720277F88515F1F3AF3099B96666DA3ABD626E39C28F3244364E1D71B40DE21723
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
6/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-04-21_93dcbb0aed1bd91fdb925ebcb20d897b_elex_glassworm_remcos_smoke-loader_stealc_stop_tofsee.exe
Resource
win10v2004-20260130-en
8 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-04-21_93dcbb0aed1bd91fdb925ebcb20d897b_elex_glassworm_remcos_smoke-loader_stealc_stop_tofsee.exe
Resource
win11-20260130-en
8 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-04-21_93dcbb0aed1bd91fdb925ebcb20d897b_elex_glassworm_remcos_smoke-loader_stealc_stop_tofsee
- Size 1.4MB
- SHA256 38098f69114acd4144f86099c3d46101cfce434d47a1050376da1b34d1780d99
- MD5 93dcbb0aed1bd91fdb925ebcb20d897b
- SHA1 2f5a1b7b14836f860b753449ba02871345207482
- SHA512 7aaf12bd93ebe4ad3c967529a8891fcda13bf58f62a2b709c509f63ce497271e73a782f9649916ad756053f1e430a7a08c0aeebc57a4bb798911be10c55e06a1
- SSDEEP 12288:/wKfOVRo9yRY48bwzYDteYIpREn0fbl1I7u+BcysVFB:/xWVeyRY40wzYDteYIp6iyPBAB
- TLSH T1CF65720277F88515F1F3AF3099B96666DA3ABD626E39C28F3244364E1D71B40DE21723
- MD5 SHA1 SHA512 SSDEEP TLSH
Score6/10-
Adds Run key to start application
-
Checks installed software on the system
Looks up Uninstall key entries in the registry to enumerate software on the system.
-
Drops file in System32 directory