General
- Target 2026-04-24_f290cc9d7dca1842f4e7572dbadb0682_elex_glassworm_remcos_smoke-loader_stealc_stop_tofsee
- Size 982KB
- Sample260424-fgaghsft7s
- SHA256 f4532b7c5e650dfea4e6ee9c83610e450823394ddb51b3e18b5d01736cca95d6
- MD5 f290cc9d7dca1842f4e7572dbadb0682
- SHA1 2e8cc4bd2f9487440da6dad01c55d860e4685c1b
- SHA512 d081b573c550d3cb5669b1fefecff9a63009a5db2246bf98564c48bbf881c03710ef277094097131224cea51f00061cf8129410b46339d2451acecb7f6cf55e9
- SSDEEP 12288:EwKfOVRo9yRYjULmS4O8b8ITDnlr0zCU1yvsj:ExWVeyRYILmS4O8b8ITDnlK6sj
- TLSH T11625C422F194CA10D56F2E30496A8EA4EA37BC416EA087DB325C3F0D7F727A1D925717
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
6/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-04-24_f290cc9d7dca1842f4e7572dbadb0682_elex_glassworm_remcos_smoke-loader_stealc_stop_tofsee.exe
Resource
win10v2004-20260130-en
8 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-04-24_f290cc9d7dca1842f4e7572dbadb0682_elex_glassworm_remcos_smoke-loader_stealc_stop_tofsee.exe
Resource
win11-20260130-en
8 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-04-24_f290cc9d7dca1842f4e7572dbadb0682_elex_glassworm_remcos_smoke-loader_stealc_stop_tofsee
- Size 982KB
- SHA256 f4532b7c5e650dfea4e6ee9c83610e450823394ddb51b3e18b5d01736cca95d6
- MD5 f290cc9d7dca1842f4e7572dbadb0682
- SHA1 2e8cc4bd2f9487440da6dad01c55d860e4685c1b
- SHA512 d081b573c550d3cb5669b1fefecff9a63009a5db2246bf98564c48bbf881c03710ef277094097131224cea51f00061cf8129410b46339d2451acecb7f6cf55e9
- SSDEEP 12288:EwKfOVRo9yRYjULmS4O8b8ITDnlr0zCU1yvsj:ExWVeyRYILmS4O8b8ITDnlK6sj
- TLSH T11625C422F194CA10D56F2E30496A8EA4EA37BC416EA087DB325C3F0D7F727A1D925717
- MD5 SHA1 SHA512 SSDEEP TLSH
Score6/10-
Adds Run key to start application
-
Checks installed software on the system
Looks up Uninstall key entries in the registry to enumerate software on the system.
-
Drops file in System32 directory