General
- Target 2026-05-11_607c2ba3b72f3873d544dc99e1dfae89_elex_glassworm_remcos_smoke-loader_stealc_stop_tofsee
- Size 817KB
- Sample260511-da734ady2p
- SHA256 b9a1177a15c5399470c57dd01163c50b65326ed9e578c66b13b1fd164f9188b9
- MD5 607c2ba3b72f3873d544dc99e1dfae89
- SHA1 3eafead1d44a023a89327769eb04b250d10b0899
- SHA512 fd48de3b9f8274b042a580b1563bcd72bde912dff57ded6e9eda457479a58309e693e7ca0ed44e096a778f00941e942412ae48ce34e95c9a6da326155f7d3ca3
- SSDEEP 6144:owynAtMrOVRkidy9yIGWlUiB2eAbQJUE4YQqLwhHbWUQ8GYrmj7sLUDtnx4bC:owKfOVRo9yRYnAb04YQqLWuXVsbe
- TLSH T182056B15FAE4D031D4A266388EABC3E45B35BC166F35C78B7A4C3B4EBF316818925316
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
6/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-05-11_607c2ba3b72f3873d544dc99e1dfae89_elex_glassworm_remcos_smoke-loader_stealc_stop_tofsee.exe
Resource
win10v2004-20260130-en
8 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-05-11_607c2ba3b72f3873d544dc99e1dfae89_elex_glassworm_remcos_smoke-loader_stealc_stop_tofsee.exe
Resource
win11-20260130-en
8 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-05-11_607c2ba3b72f3873d544dc99e1dfae89_elex_glassworm_remcos_smoke-loader_stealc_stop_tofsee
- Size 817KB
- SHA256 b9a1177a15c5399470c57dd01163c50b65326ed9e578c66b13b1fd164f9188b9
- MD5 607c2ba3b72f3873d544dc99e1dfae89
- SHA1 3eafead1d44a023a89327769eb04b250d10b0899
- SHA512 fd48de3b9f8274b042a580b1563bcd72bde912dff57ded6e9eda457479a58309e693e7ca0ed44e096a778f00941e942412ae48ce34e95c9a6da326155f7d3ca3
- SSDEEP 6144:owynAtMrOVRkidy9yIGWlUiB2eAbQJUE4YQqLwhHbWUQ8GYrmj7sLUDtnx4bC:owKfOVRo9yRYnAb04YQqLWuXVsbe
- TLSH T182056B15FAE4D031D4A266388EABC3E45B35BC166F35C78B7A4C3B4EBF316818925316
- MD5 SHA1 SHA512 SSDEEP TLSH
Score6/10Adds Run key to start application
Checks installed software on the system
Looks up Uninstall key entries in the registry to enumerate software on the system.
Drops file in System32 directory