General
- Target 2026-06-04_95d437c242934abd7212b762ec7581ee_elex_glassworm_remcos_smoke-loader_stealc_stop_tofsee
- Size 2.1MB
- Sample260604-e4fflshz4s
- SHA256 46c2de3a0307471fee60f70cbf2e3cbe096d1c76789973781458b4e69b7abc0f
- MD5 95d437c242934abd7212b762ec7581ee
- SHA1 69c8cbf459c5d39e7352c5ab00459c45d2b66b07
- SHA512 cb2c1e30ef61eea9cffa56c3244b0d49780b0f2fbf473ac0a9bfe29978bf6ab8b301355921c81fb4d82049baf3c22b48df86171020378d065e358f88d2ca5f46
- SSDEEP 12288:NwKfOVRo9yRYYQULmX9Cc4O8b8ITDnlwCj0vDFlwwP/:NxWVeyRYFULmX9Cc4O8b8ITDnlwz/
- TLSH T106A55E62A2D08035F4B22E308969C5ACF6367C16D9678E4B3144BFCDBBF0790999573E
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
6/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-06-04_95d437c242934abd7212b762ec7581ee_elex_glassworm_remcos_smoke-loader_stealc_stop_tofsee.exe
Resource
win10v2004-20260513-en
8 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-06-04_95d437c242934abd7212b762ec7581ee_elex_glassworm_remcos_smoke-loader_stealc_stop_tofsee.exe
Resource
win11-20260513-en
8 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-06-04_95d437c242934abd7212b762ec7581ee_elex_glassworm_remcos_smoke-loader_stealc_stop_tofsee
- Size 2.1MB
- SHA256 46c2de3a0307471fee60f70cbf2e3cbe096d1c76789973781458b4e69b7abc0f
- MD5 95d437c242934abd7212b762ec7581ee
- SHA1 69c8cbf459c5d39e7352c5ab00459c45d2b66b07
- SHA512 cb2c1e30ef61eea9cffa56c3244b0d49780b0f2fbf473ac0a9bfe29978bf6ab8b301355921c81fb4d82049baf3c22b48df86171020378d065e358f88d2ca5f46
- SSDEEP 12288:NwKfOVRo9yRYYQULmX9Cc4O8b8ITDnlwCj0vDFlwwP/:NxWVeyRYFULmX9Cc4O8b8ITDnlwz/
- TLSH T106A55E62A2D08035F4B22E308969C5ACF6367C16D9678E4B3144BFCDBBF0790999573E
- MD5 SHA1 SHA512 SSDEEP TLSH
Score6/10-
Adds Run key to start application
-
Checks installed software on the system
Looks up Uninstall key entries in the registry to enumerate software on the system.
-
Drops file in System32 directory