General
- Target 2026-06-26_a79be72648c9dfd84a4c00669c44365f_elex_glassworm_remcos_smoke-loader_stealc_stop_tofsee
- Size 1.2MB
- Sample260629-qmvdzset7v
- SHA256 c8016b63b41607e9590ccc47c9a43a83c995f6e1e23b4d00aeef4a9c9970c15d
- MD5 a79be72648c9dfd84a4c00669c44365f
- SHA1 89e489acffe67f1d5a238f270b57622a09ef9b3d
- SHA512 ed66d001a093c0a5a9fba255669905c04ae8c818b30da178c980a77ad8369c8a5e88a255a3f89b6b8f9206ff733364b445fa59a8d39adc333517af60356ed663
- SSDEEP 24576:3xWVeyRY5z4O8b8ITDnljFC1wGYJL4YJLtp:38YN4O8b8ITDnljFC6GYF4YFz
- TLSH T192452A21B2E48025F4B77B348D768EA43A36BC129E75C64F364C375E6F316A0DE21726
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
8/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-06-26_a79be72648c9dfd84a4c00669c44365f_elex_glassworm_remcos_smoke-loader_stealc_stop_tofsee.exe
Resource
win10v2004-20260513-en
8 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-06-26_a79be72648c9dfd84a4c00669c44365f_elex_glassworm_remcos_smoke-loader_stealc_stop_tofsee.exe
Resource
win11ltsc2024-20260618-en
9 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-06-26_a79be72648c9dfd84a4c00669c44365f_elex_glassworm_remcos_smoke-loader_stealc_stop_tofsee
- Size 1.2MB
- SHA256 c8016b63b41607e9590ccc47c9a43a83c995f6e1e23b4d00aeef4a9c9970c15d
- MD5 a79be72648c9dfd84a4c00669c44365f
- SHA1 89e489acffe67f1d5a238f270b57622a09ef9b3d
- SHA512 ed66d001a093c0a5a9fba255669905c04ae8c818b30da178c980a77ad8369c8a5e88a255a3f89b6b8f9206ff733364b445fa59a8d39adc333517af60356ed663
- SSDEEP 24576:3xWVeyRY5z4O8b8ITDnljFC1wGYJL4YJLtp:38YN4O8b8ITDnljFC6GYF4YFz
- TLSH T192452A21B2E48025F4B77B348D768EA43A36BC129E75C64F364C375E6F316A0DE21726
- MD5 SHA1 SHA512 SSDEEP TLSH
Score8/10-
Drops file in Drivers directory
-
Adds Run key to start application
-
Checks installed software on the system
Looks up Uninstall key entries in the registry to enumerate software on the system.
-
Drops file in System32 directory