General
- Target 2026-06-04_964b529753956de0a0bc8e379a9e1d60_elex_glassworm_remcos_smoke-loader_stealc_stop_tofsee
- Size 797KB
- Sample260604-e4v63aaz7r
- SHA256 7d8858d0c4a812190ef44592d716266ae257735e4ebb643cfa450519effecd5f
- MD5 964b529753956de0a0bc8e379a9e1d60
- SHA1 83f5f60cee5fbcb0e2cd7af3cef65f68e470ac3b
- SHA512 70eed10d9d537103c1dc4413862f64b0529b934cc9ef2a071a20e6f6b5a8a26d56cfea9dc2a3f85597e5e1b9a868a6a4d2407fbc80c4cf2f1588f25584412903
- SSDEEP 12288:FwKfOVRo9yRYQ+84O8b8ITDnl20KBoKpXSr:FxWVeyRYb84O8b8ITDnlumKwr
- TLSH T1D605E731B6D4DA21D5AB3A344D668EA47627BC126EA487CB36483F4E7F306B1CD21317
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
6/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-06-04_964b529753956de0a0bc8e379a9e1d60_elex_glassworm_remcos_smoke-loader_stealc_stop_tofsee.exe
Resource
win10v2004-20260513-en
8 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-06-04_964b529753956de0a0bc8e379a9e1d60_elex_glassworm_remcos_smoke-loader_stealc_stop_tofsee.exe
Resource
win11-20260513-en
8 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-06-04_964b529753956de0a0bc8e379a9e1d60_elex_glassworm_remcos_smoke-loader_stealc_stop_tofsee
- Size 797KB
- SHA256 7d8858d0c4a812190ef44592d716266ae257735e4ebb643cfa450519effecd5f
- MD5 964b529753956de0a0bc8e379a9e1d60
- SHA1 83f5f60cee5fbcb0e2cd7af3cef65f68e470ac3b
- SHA512 70eed10d9d537103c1dc4413862f64b0529b934cc9ef2a071a20e6f6b5a8a26d56cfea9dc2a3f85597e5e1b9a868a6a4d2407fbc80c4cf2f1588f25584412903
- SSDEEP 12288:FwKfOVRo9yRYQ+84O8b8ITDnl20KBoKpXSr:FxWVeyRYb84O8b8ITDnlumKwr
- TLSH T1D605E731B6D4DA21D5AB3A344D668EA47627BC126EA487CB36483F4E7F306B1CD21317
- MD5 SHA1 SHA512 SSDEEP TLSH
Score6/10-
Adds Run key to start application
-
Checks installed software on the system
Looks up Uninstall key entries in the registry to enumerate software on the system.
-
Drops file in System32 directory