General
- Target 2026-06-28_7e0682f02bd7e6c1c0c94b84102c786b_coinminer_elex_glassworm_remcos_smoke-loader_stealc_stop_tofsee
- Size 1.0MB
- Sample260628-z71aeae19j
- SHA256 93884876169078e219e472b98993007ec7a77a1ec00de92a96fc708ea4ecaa1b
- MD5 7e0682f02bd7e6c1c0c94b84102c786b
- SHA1 4fb56b62ddc9239fd0920963e3a9066a381f1806
- SHA512 86c8f027a971c06a4bc92d733435d5e3a2ad0b9ebd790db54c2802a32d0759554f5e909d23060f8a4b0ee79fb118a156d1c617e8eae160caef795c29ef009c3e
- SSDEEP 24576:RxWVeyRY11LmA734O8b8ITDnlguk493/2c4:R8Yr4O8b8ITDnlguk49vE
- TLSH T1C5352922F1D4C020E5A73E340DAA8EA4FA36BC416EE48797355C3B0DAF757A1DD29316
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
6/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-06-28_7e0682f02bd7e6c1c0c94b84102c786b_coinminer_elex_glassworm_remcos_smoke-loader_stealc_stop_tofsee.exe
Resource
win10v2004-20260513-en
8 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-06-28_7e0682f02bd7e6c1c0c94b84102c786b_coinminer_elex_glassworm_remcos_smoke-loader_stealc_stop_tofsee.exe
Resource
win11ltsc2024-20260618-en
8 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-06-28_7e0682f02bd7e6c1c0c94b84102c786b_coinminer_elex_glassworm_remcos_smoke-loader_stealc_stop_tofsee
- Size 1.0MB
- SHA256 93884876169078e219e472b98993007ec7a77a1ec00de92a96fc708ea4ecaa1b
- MD5 7e0682f02bd7e6c1c0c94b84102c786b
- SHA1 4fb56b62ddc9239fd0920963e3a9066a381f1806
- SHA512 86c8f027a971c06a4bc92d733435d5e3a2ad0b9ebd790db54c2802a32d0759554f5e909d23060f8a4b0ee79fb118a156d1c617e8eae160caef795c29ef009c3e
- SSDEEP 24576:RxWVeyRY11LmA734O8b8ITDnlguk493/2c4:R8Yr4O8b8ITDnlguk49vE
- TLSH T1C5352922F1D4C020E5A73E340DAA8EA4FA36BC416EE48797355C3B0DAF757A1DD29316
- MD5 SHA1 SHA512 SSDEEP TLSH
Score6/10-
Adds Run key to start application
-
Checks installed software on the system
Looks up Uninstall key entries in the registry to enumerate software on the system.
-
Drops file in System32 directory