General
- Target 2026-05-10_a524b53e79509d67f17da5262ed69972_elex_glassworm_remcos_smoke-loader_stealc_stop_tofsee
- Size 1.1MB
- Sample260510-pgpe4sa16j
- SHA256 352970ce5f51128fe94af09b9f95190f018b6833a44d3e77d093a97ba5a6a40b
- MD5 a524b53e79509d67f17da5262ed69972
- SHA1 49c1b9cc5123c0e8dc51b46e5afa9e5f82e0280b
- SHA512 d83ef4995dcd2ff91aa2fc8e277bccf4110db0e831ff07ab649b7b17a46db287b04b2b0adf55c7901c6a2058ac13c2fbe28651a446475d334df6784c35ce5d9b
- SSDEEP 12288:kwKfOVRo9yRYBLm14O8b8ITDnlV0JJKETTx5KEZSL+U:kxWVeyRYBLm14O8b8ITDnliY05U
- TLSH T170452922F1C8E0BED462BE38186A6EA2EA35BCC159E84787314CB70E5F753B1DD15319
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
6/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-05-10_a524b53e79509d67f17da5262ed69972_elex_glassworm_remcos_smoke-loader_stealc_stop_tofsee.exe
Resource
win10v2004-20260130-en
8 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-05-10_a524b53e79509d67f17da5262ed69972_elex_glassworm_remcos_smoke-loader_stealc_stop_tofsee.exe
Resource
win11-20250502-en
8 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-05-10_a524b53e79509d67f17da5262ed69972_elex_glassworm_remcos_smoke-loader_stealc_stop_tofsee
- Size 1.1MB
- SHA256 352970ce5f51128fe94af09b9f95190f018b6833a44d3e77d093a97ba5a6a40b
- MD5 a524b53e79509d67f17da5262ed69972
- SHA1 49c1b9cc5123c0e8dc51b46e5afa9e5f82e0280b
- SHA512 d83ef4995dcd2ff91aa2fc8e277bccf4110db0e831ff07ab649b7b17a46db287b04b2b0adf55c7901c6a2058ac13c2fbe28651a446475d334df6784c35ce5d9b
- SSDEEP 12288:kwKfOVRo9yRYBLm14O8b8ITDnlV0JJKETTx5KEZSL+U:kxWVeyRYBLm14O8b8ITDnliY05U
- TLSH T170452922F1C8E0BED462BE38186A6EA2EA35BCC159E84787314CB70E5F753B1DD15319
- MD5 SHA1 SHA512 SSDEEP TLSH
Score6/10-
Adds Run key to start application
-
Checks installed software on the system
Looks up Uninstall key entries in the registry to enumerate software on the system.
-
Drops file in System32 directory