General
- Target 2026-04-23_6415946774b9b0de726f4d9604f69f70_elex_glassworm_remcos_smoke-loader_stealc_stop_tofsee
- Size 3.6MB
- Sample260423-rt744aez7n
- SHA256 5f958e9972a5bef2bd6a1a02ce9a2976531cbc0cd7a74c62d9541607a426f5ee
- MD5 6415946774b9b0de726f4d9604f69f70
- SHA1 b00f12a9c69aa69831ce832e671cc4264c8d06c3
- SHA512 7b1ad95655814de8213bfb4d493ed0b4276e8b7e4b68d0bf2a2228bb601a8a93afb324d304c555f36531737d1b3744571f5eb5dbe1a85e686d1ca6dab78f3310
- SSDEEP 24576:PxWVeyRYV44s2hzmZAl/1xTVIlz7X9zOo4PjnikEpx/nLWvJowf:P8YmzuzmZAlrSR7Xgo4TiRPnLWvJ/
- TLSH T1CD06E72162E4C134F1B36630D87982F92527BC56EA779D0F2144BD9D7FB0790A9A0B3E
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
6/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-04-23_6415946774b9b0de726f4d9604f69f70_elex_glassworm_remcos_smoke-loader_stealc_stop_tofsee.exe
Resource
win10v2004-20260130-en
8 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-04-23_6415946774b9b0de726f4d9604f69f70_elex_glassworm_remcos_smoke-loader_stealc_stop_tofsee.exe
Resource
win11-20260130-en
8 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-04-23_6415946774b9b0de726f4d9604f69f70_elex_glassworm_remcos_smoke-loader_stealc_stop_tofsee
- Size 3.6MB
- SHA256 5f958e9972a5bef2bd6a1a02ce9a2976531cbc0cd7a74c62d9541607a426f5ee
- MD5 6415946774b9b0de726f4d9604f69f70
- SHA1 b00f12a9c69aa69831ce832e671cc4264c8d06c3
- SHA512 7b1ad95655814de8213bfb4d493ed0b4276e8b7e4b68d0bf2a2228bb601a8a93afb324d304c555f36531737d1b3744571f5eb5dbe1a85e686d1ca6dab78f3310
- SSDEEP 24576:PxWVeyRYV44s2hzmZAl/1xTVIlz7X9zOo4PjnikEpx/nLWvJowf:P8YmzuzmZAlrSR7Xgo4TiRPnLWvJ/
- TLSH T1CD06E72162E4C134F1B36630D87982F92527BC56EA779D0F2144BD9D7FB0790A9A0B3E
- MD5 SHA1 SHA512 SSDEEP TLSH
Score6/10-
Adds Run key to start application
-
Checks installed software on the system
Looks up Uninstall key entries in the registry to enumerate software on the system.
-
Drops file in System32 directory