General
- Target 2026-06-25_2a49828adac0ad794dd502021c9ac7b2_elex_glassworm_remcos_smoke-loader_stealc_stop_tofsee
- Size 2.1MB
- Sample260629-3esxeaax5p
- SHA256 a3be5b447394451301087b99a0ac6bb6da6952a16f44375c7c1e50def2c014ba
- MD5 2a49828adac0ad794dd502021c9ac7b2
- SHA1 8c04a319f74971bb1570aa8448d510e43f3f404e
- SHA512 915dd7159c38b375cedf45de0d2e6e26175317b660a4a832784a856df1894b4066bca9f2fe7e23777412c89b3680a797062c81cad5b499392c18b9079315047d
- SSDEEP 24576:PxWVeyRYG4s2hzwA91xTVIlz7X9zOo4PjnikEpx/nLWvJKo:P8YGzuzwAlSR7Xgo4TiRPnLWvJN
- TLSH T14AA5BD11B6E48020F5B37B349D7E82A44A36BC56AFF4D65F36487B5E6F30680B920736
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
6/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-06-25_2a49828adac0ad794dd502021c9ac7b2_elex_glassworm_remcos_smoke-loader_stealc_stop_tofsee.exe
Resource
win10v2004-20260513-en
8 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-06-25_2a49828adac0ad794dd502021c9ac7b2_elex_glassworm_remcos_smoke-loader_stealc_stop_tofsee.exe
Resource
win11ltsc2024-20260618-en
8 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-06-25_2a49828adac0ad794dd502021c9ac7b2_elex_glassworm_remcos_smoke-loader_stealc_stop_tofsee
- Size 2.1MB
- SHA256 a3be5b447394451301087b99a0ac6bb6da6952a16f44375c7c1e50def2c014ba
- MD5 2a49828adac0ad794dd502021c9ac7b2
- SHA1 8c04a319f74971bb1570aa8448d510e43f3f404e
- SHA512 915dd7159c38b375cedf45de0d2e6e26175317b660a4a832784a856df1894b4066bca9f2fe7e23777412c89b3680a797062c81cad5b499392c18b9079315047d
- SSDEEP 24576:PxWVeyRYG4s2hzwA91xTVIlz7X9zOo4PjnikEpx/nLWvJKo:P8YGzuzwAlSR7Xgo4TiRPnLWvJN
- TLSH T14AA5BD11B6E48020F5B37B349D7E82A44A36BC56AFF4D65F36487B5E6F30680B920736
- MD5 SHA1 SHA512 SSDEEP TLSH
Score6/10-
Adds Run key to start application
-
Checks installed software on the system
Looks up Uninstall key entries in the registry to enumerate software on the system.
-
Drops file in System32 directory