General
- Target 2026-04-22_43352d2b4b3c1b3412fe78561145d3bf_elex_glassworm_remcos_smoke-loader_stealc_stop_tofsee
- Size 2.5MB
- Sample260422-esd4eacw81
- SHA256 6dd5dcb1750a1aae42eba85215c29fda49ad2c42b50d1183ef922bdac4d69027
- MD5 43352d2b4b3c1b3412fe78561145d3bf
- SHA1 caa630bfa16fb2adfddb1bcef79474bbcc017540
- SHA512 850fab2c43afa3f2b152b5c2c7e3f80fc6c980119603c831cb6e248e2faafd1fff512544298b9a5ecc84d622ea68e51d5c1b53a1e56a49c2f71402dc49384218
- SSDEEP 12288:SwKfOVRo9yRYOu42X5sUSF14tsCI0GVbYwbk8Qhzj4IkQWbTqWLsW2IwU:SxWVeyRYL4s2hzneKdwU
- TLSH T1F0C53021A2E4C135F1B76A30D87582F92527BC56EA379D0F2144BD9D7FB079089A0B3E
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
6/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-04-22_43352d2b4b3c1b3412fe78561145d3bf_elex_glassworm_remcos_smoke-loader_stealc_stop_tofsee.exe
Resource
win10v2004-20260130-en
8 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-04-22_43352d2b4b3c1b3412fe78561145d3bf_elex_glassworm_remcos_smoke-loader_stealc_stop_tofsee.exe
Resource
win11-20260130-en
8 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-04-22_43352d2b4b3c1b3412fe78561145d3bf_elex_glassworm_remcos_smoke-loader_stealc_stop_tofsee
- Size 2.5MB
- SHA256 6dd5dcb1750a1aae42eba85215c29fda49ad2c42b50d1183ef922bdac4d69027
- MD5 43352d2b4b3c1b3412fe78561145d3bf
- SHA1 caa630bfa16fb2adfddb1bcef79474bbcc017540
- SHA512 850fab2c43afa3f2b152b5c2c7e3f80fc6c980119603c831cb6e248e2faafd1fff512544298b9a5ecc84d622ea68e51d5c1b53a1e56a49c2f71402dc49384218
- SSDEEP 12288:SwKfOVRo9yRYOu42X5sUSF14tsCI0GVbYwbk8Qhzj4IkQWbTqWLsW2IwU:SxWVeyRYL4s2hzneKdwU
- TLSH T1F0C53021A2E4C135F1B76A30D87582F92527BC56EA379D0F2144BD9D7FB079089A0B3E
- MD5 SHA1 SHA512 SSDEEP TLSH
Score6/10-
Adds Run key to start application
-
Checks installed software on the system
Looks up Uninstall key entries in the registry to enumerate software on the system.
-
Drops file in System32 directory