General
- Target 2026-06-27_acfd18cd5d63a4fc77b2246c1dc2082c_elex_glassworm_remcos_smoke-loader_stealc_stop_tofsee
- Size 1.7MB
- Sample260629-ej4mpsdy5m
- SHA256 e9894677a2ef849ed8f50176101fdca38825f58b7b3604515372049d54b1fec4
- MD5 acfd18cd5d63a4fc77b2246c1dc2082c
- SHA1 21ec38fe02ecfe6568ddc259510c0ce0cf3d180c
- SHA512 452b4eefce5b35e51b71e6099aac8a1c1737f6cfd920370eaf0f8d95ce89ad14b8268ca7999f0e4d625af3ddf1042054b9cff12076fd9d746fda25816dbde723
- SSDEEP 12288:ZwKfOVRo9yRYHtm6EQUj0ESA/R4O8b8ITDnlz0z6xouGL0XqRTl13Asne:ZxWVeyRYHt72974O8b8ITDnlUxRTlnne
- TLSH T1B185E612B3D4C562E4B72A30987B86651F727C566F72D64F3388370E2F72790AE12726
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
6/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-06-27_acfd18cd5d63a4fc77b2246c1dc2082c_elex_glassworm_remcos_smoke-loader_stealc_stop_tofsee.exe
Resource
win10v2004-20260513-en
8 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-06-27_acfd18cd5d63a4fc77b2246c1dc2082c_elex_glassworm_remcos_smoke-loader_stealc_stop_tofsee.exe
Resource
win11ltsc2024-20260617-en
8 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-06-27_acfd18cd5d63a4fc77b2246c1dc2082c_elex_glassworm_remcos_smoke-loader_stealc_stop_tofsee
- Size 1.7MB
- SHA256 e9894677a2ef849ed8f50176101fdca38825f58b7b3604515372049d54b1fec4
- MD5 acfd18cd5d63a4fc77b2246c1dc2082c
- SHA1 21ec38fe02ecfe6568ddc259510c0ce0cf3d180c
- SHA512 452b4eefce5b35e51b71e6099aac8a1c1737f6cfd920370eaf0f8d95ce89ad14b8268ca7999f0e4d625af3ddf1042054b9cff12076fd9d746fda25816dbde723
- SSDEEP 12288:ZwKfOVRo9yRYHtm6EQUj0ESA/R4O8b8ITDnlz0z6xouGL0XqRTl13Asne:ZxWVeyRYHt72974O8b8ITDnlUxRTlnne
- TLSH T1B185E612B3D4C562E4B72A30987B86651F727C566F72D64F3388370E2F72790AE12726
- MD5 SHA1 SHA512 SSDEEP TLSH
Score6/10-
Adds Run key to start application
-
Checks installed software on the system
Looks up Uninstall key entries in the registry to enumerate software on the system.
-
Drops file in System32 directory