General
- Target 2026-06-29_e877608e073c555520d5bbc4f603ed4a_elex_glassworm_remcos_smoke-loader_stealc_stop_tofsee
- Size 927KB
- Sample260630-cd9knac16j
- SHA256 180aa8633092336b3b8f01fafd433f4309b0f9a822a6ad0b41e1fec9fe0ac77a
- MD5 e877608e073c555520d5bbc4f603ed4a
- SHA1 dcab2d8cc2a1d93815a9834a04ceaa0ef89275aa
- SHA512 987958be04d539f920567e2cd1605772f21783d946128ebd1a5209f8c9595c4da7e7542690336f89c7f21d5dbddf33b3909f1ce12d052b23a3c6cfe64bffbbaf
- SSDEEP 12288:nwKfOVRo9yRYzSVcLmA4O8b8ITDnlr0xWVd:nxWVeyRY+VcLmA4O8b8ITDnl9d
- TLSH T1DB150823F1D4C021D5A73E3009BA8EA4FA36BC416AE48797365C3B4D6F727A1ED25316
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
6/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-06-29_e877608e073c555520d5bbc4f603ed4a_elex_glassworm_remcos_smoke-loader_stealc_stop_tofsee.exe
Resource
win10v2004-20260513-en
8 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-06-29_e877608e073c555520d5bbc4f603ed4a_elex_glassworm_remcos_smoke-loader_stealc_stop_tofsee.exe
Resource
win11ltsc2024-20260618-en
8 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-06-29_e877608e073c555520d5bbc4f603ed4a_elex_glassworm_remcos_smoke-loader_stealc_stop_tofsee
- Size 927KB
- SHA256 180aa8633092336b3b8f01fafd433f4309b0f9a822a6ad0b41e1fec9fe0ac77a
- MD5 e877608e073c555520d5bbc4f603ed4a
- SHA1 dcab2d8cc2a1d93815a9834a04ceaa0ef89275aa
- SHA512 987958be04d539f920567e2cd1605772f21783d946128ebd1a5209f8c9595c4da7e7542690336f89c7f21d5dbddf33b3909f1ce12d052b23a3c6cfe64bffbbaf
- SSDEEP 12288:nwKfOVRo9yRYzSVcLmA4O8b8ITDnlr0xWVd:nxWVeyRY+VcLmA4O8b8ITDnl9d
- TLSH T1DB150823F1D4C021D5A73E3009BA8EA4FA36BC416AE48797365C3B4D6F727A1ED25316
- MD5 SHA1 SHA512 SSDEEP TLSH
Score6/10-
Adds Run key to start application
-
Checks installed software on the system
Looks up Uninstall key entries in the registry to enumerate software on the system.
-
Drops file in System32 directory