General
- Target 2026-06-27_0ec5c41ad5629c24ec06d7083b6bb499_elex_glassworm_remcos_smoke-loader_stealc_stop_tofsee
- Size 1.3MB
- Sample260629-l4chaacv8n
- SHA256 60fcfdca15e69fd7c39b9a76e132a7cc622b9da9e378f062dd2dd07865cc492f
- MD5 0ec5c41ad5629c24ec06d7083b6bb499
- SHA1 fd8d13cea142638ee6dae804747a649ee97e7cff
- SHA512 898fee514d6547ffaced241a8fff1bdd7cd57a388142763dadbfc07982c03f4e6142e80079ab18eeae2967dd06ab49c91d8dbd300b27290f500139c6461d5e94
- SSDEEP 12288:nwKfOVRo9yRYWv42X5sUSF14t24O8b8ITDnluRPiwAYpGHM0H8H:nxWVeyRYWv4s2hzN4O8b8ITDnluzpW8H
- TLSH T1A655D52066E4CE11F2FB763088754A202927BC515EF887CE334ABF5A7BB16A4CD65713
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
6/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-06-27_0ec5c41ad5629c24ec06d7083b6bb499_elex_glassworm_remcos_smoke-loader_stealc_stop_tofsee.exe
Resource
win10v2004-20260513-en
8 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-06-27_0ec5c41ad5629c24ec06d7083b6bb499_elex_glassworm_remcos_smoke-loader_stealc_stop_tofsee.exe
Resource
win11ltsc2024-20260617-en
8 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-06-27_0ec5c41ad5629c24ec06d7083b6bb499_elex_glassworm_remcos_smoke-loader_stealc_stop_tofsee
- Size 1.3MB
- SHA256 60fcfdca15e69fd7c39b9a76e132a7cc622b9da9e378f062dd2dd07865cc492f
- MD5 0ec5c41ad5629c24ec06d7083b6bb499
- SHA1 fd8d13cea142638ee6dae804747a649ee97e7cff
- SHA512 898fee514d6547ffaced241a8fff1bdd7cd57a388142763dadbfc07982c03f4e6142e80079ab18eeae2967dd06ab49c91d8dbd300b27290f500139c6461d5e94
- SSDEEP 12288:nwKfOVRo9yRYWv42X5sUSF14t24O8b8ITDnluRPiwAYpGHM0H8H:nxWVeyRYWv4s2hzN4O8b8ITDnluzpW8H
- TLSH T1A655D52066E4CE11F2FB763088754A202927BC515EF887CE334ABF5A7BB16A4CD65713
- MD5 SHA1 SHA512 SSDEEP TLSH
Score6/10-
Adds Run key to start application
-
Checks installed software on the system
Looks up Uninstall key entries in the registry to enumerate software on the system.
-
Drops file in System32 directory