General
- Target 2026-05-22_cd3965f78fd3a45d9092c784067fb357_elex_glassworm_remcos_smoke-loader_stealc_stop_tofsee
- Size 4.1MB
- Sample260522-e9bplsev4r
- SHA256 ab39f06b16947517990509b6b89f6d5a8665e8659bcfa9a50271877e63464367
- MD5 cd3965f78fd3a45d9092c784067fb357
- SHA1 d992306c121c2ae52448a9796f85a7a995d33d14
- SHA512 224e2e34c566bd9a244162a5e40cd9ba229e5e8b5cb4a60bd92e70da21132ef2947e8037bdc140c468c947a64aef3e671d6a2a443c5292561b009f622658d5f1
- SSDEEP 24576:SxWVeyRYyWqwzYDteYIp6LEQcVkLHgZpJkvQ/vk4agWs8yKFMiX8nb4Udn89nlbK:S8YuLENkLHkJkv4f4v9lbFzfyZou
- TLSH T18D16C421A7F80644F1F36F746DB55254DB37BD62AE36D21E2A88302E1972B90DD21B33
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
6/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-05-22_cd3965f78fd3a45d9092c784067fb357_elex_glassworm_remcos_smoke-loader_stealc_stop_tofsee.exe
Resource
win10v2004-20260513-en
8 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-05-22_cd3965f78fd3a45d9092c784067fb357_elex_glassworm_remcos_smoke-loader_stealc_stop_tofsee.exe
Resource
win11-20260513-en
8 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-05-22_cd3965f78fd3a45d9092c784067fb357_elex_glassworm_remcos_smoke-loader_stealc_stop_tofsee
- Size 4.1MB
- SHA256 ab39f06b16947517990509b6b89f6d5a8665e8659bcfa9a50271877e63464367
- MD5 cd3965f78fd3a45d9092c784067fb357
- SHA1 d992306c121c2ae52448a9796f85a7a995d33d14
- SHA512 224e2e34c566bd9a244162a5e40cd9ba229e5e8b5cb4a60bd92e70da21132ef2947e8037bdc140c468c947a64aef3e671d6a2a443c5292561b009f622658d5f1
- SSDEEP 24576:SxWVeyRYyWqwzYDteYIp6LEQcVkLHgZpJkvQ/vk4agWs8yKFMiX8nb4Udn89nlbK:S8YuLENkLHkJkv4f4v9lbFzfyZou
- TLSH T18D16C421A7F80644F1F36F746DB55254DB37BD62AE36D21E2A88302E1972B90DD21B33
- MD5 SHA1 SHA512 SSDEEP TLSH
Score6/10-
Adds Run key to start application
-
Checks installed software on the system
Looks up Uninstall key entries in the registry to enumerate software on the system.
-
Drops file in System32 directory