General
- Target 2026-06-04_9171070672e76074e087a1ff69791cad_elex_glassworm_remcos_smoke-loader_stealc_stop_tofsee
- Size 796KB
- Sample260604-e118xahy9z
- SHA256 3fa3e1f35eb27dbbc480522364eb98f20258c468163055932fbc352c5cbaa394
- MD5 9171070672e76074e087a1ff69791cad
- SHA1 55ce3f31167a29744f4f48d0309566c813eb7924
- SHA512 833b8da11eee0babf7378146bc2c5a8abddc33535dbdeaa9538d419afe8e7a04bb7e6ac5361c22ebc3e85678a577e6b0c3a1c384a1f48e64cda458b50643257b
- SSDEEP 12288:ZwKfOVRo9yRY7yC4O8b8ITDnl20KBoKpX5D:ZxWVeyRYeC4O8b8ITDnlumKDD
- TLSH T12A05E731B6D4DA21D5AB3A344D668EA47627BC126EA487CB36483F4E7F306B1CD21317
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
6/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-06-04_9171070672e76074e087a1ff69791cad_elex_glassworm_remcos_smoke-loader_stealc_stop_tofsee.exe
Resource
win10v2004-20260513-en
8 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-06-04_9171070672e76074e087a1ff69791cad_elex_glassworm_remcos_smoke-loader_stealc_stop_tofsee.exe
Resource
win11-20260513-en
8 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-06-04_9171070672e76074e087a1ff69791cad_elex_glassworm_remcos_smoke-loader_stealc_stop_tofsee
- Size 796KB
- SHA256 3fa3e1f35eb27dbbc480522364eb98f20258c468163055932fbc352c5cbaa394
- MD5 9171070672e76074e087a1ff69791cad
- SHA1 55ce3f31167a29744f4f48d0309566c813eb7924
- SHA512 833b8da11eee0babf7378146bc2c5a8abddc33535dbdeaa9538d419afe8e7a04bb7e6ac5361c22ebc3e85678a577e6b0c3a1c384a1f48e64cda458b50643257b
- SSDEEP 12288:ZwKfOVRo9yRY7yC4O8b8ITDnl20KBoKpX5D:ZxWVeyRYeC4O8b8ITDnlumKDD
- TLSH T12A05E731B6D4DA21D5AB3A344D668EA47627BC126EA487CB36483F4E7F306B1CD21317
- MD5 SHA1 SHA512 SSDEEP TLSH
Score6/10-
Adds Run key to start application
-
Checks installed software on the system
Looks up Uninstall key entries in the registry to enumerate software on the system.
-
Drops file in System32 directory