General
- Target 2026-06-27_c38c86fc1e24760fdcbb5fdf51be2264_elex_glassworm_remcos_smoke-loader_stealc_stop_tofsee
- Size 3.8MB
- Sample260629-dpep4ac12p
- SHA256 141079b3d3a825204fd28fd5750116af2ea2b7ec6f87c8d28ae78f84e7e93fd2
- MD5 c38c86fc1e24760fdcbb5fdf51be2264
- SHA1 92a389a8d1c0aca190aa72b589b4f54889e39a34
- SHA512 ebcdc075400dd9ba0aa38a065277ed9e6a12b59dcac753c84ab80b87d9ffa0963371f3f4da18253710a7220d701c75b6a4bcf4810a01b1dfe7599af67fcd9269
- SSDEEP 24576:ixWVeyRYvwzYDteYIp6+UskLHgZpJkvQ/vk4agWs8yKFMiX8nb4Udn89nlbFyKfj:i8Yf+rkLHkJkv4f4v9lbFzfyZo1
- TLSH T1B616A503B7F80647F1F3EF7569B55274DA36BD6DAA36C21E2684301E1972B809D21B23
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
6/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-06-27_c38c86fc1e24760fdcbb5fdf51be2264_elex_glassworm_remcos_smoke-loader_stealc_stop_tofsee.exe
Resource
win10v2004-20260513-en
8 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-06-27_c38c86fc1e24760fdcbb5fdf51be2264_elex_glassworm_remcos_smoke-loader_stealc_stop_tofsee.exe
Resource
win11ltsc2024-20260618-en
8 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-06-27_c38c86fc1e24760fdcbb5fdf51be2264_elex_glassworm_remcos_smoke-loader_stealc_stop_tofsee
- Size 3.8MB
- SHA256 141079b3d3a825204fd28fd5750116af2ea2b7ec6f87c8d28ae78f84e7e93fd2
- MD5 c38c86fc1e24760fdcbb5fdf51be2264
- SHA1 92a389a8d1c0aca190aa72b589b4f54889e39a34
- SHA512 ebcdc075400dd9ba0aa38a065277ed9e6a12b59dcac753c84ab80b87d9ffa0963371f3f4da18253710a7220d701c75b6a4bcf4810a01b1dfe7599af67fcd9269
- SSDEEP 24576:ixWVeyRYvwzYDteYIp6+UskLHgZpJkvQ/vk4agWs8yKFMiX8nb4Udn89nlbFyKfj:i8Yf+rkLHkJkv4f4v9lbFzfyZo1
- TLSH T1B616A503B7F80647F1F3EF7569B55274DA36BD6DAA36C21E2684301E1972B809D21B23
- MD5 SHA1 SHA512 SSDEEP TLSH
Score6/10-
Adds Run key to start application
-
Checks installed software on the system
Looks up Uninstall key entries in the registry to enumerate software on the system.
-
Drops file in System32 directory