General
- Target 2026-06-30_f4f61e5bf14bbbf7298d1d49b6f2b273_elex_glassworm_remcos_smoke-loader_stealc_stop_tofsee
- Size 927KB
- Sample260701-chgenscv2p
- SHA256 f7dc0eed35eed428f91a729360ff7a2c8ae500e5cb32767492904274edc05135
- MD5 f4f61e5bf14bbbf7298d1d49b6f2b273
- SHA1 0803b4cbbecd87342eb32abe54a4642e65f0164b
- SHA512 b653656f11ee9f9e267f7f68c4821dab6e297fe1d11dd5ddd5c8898316b1f99a91072eac234eded96fe66a6e258307c01b4cf29af7e1a5698b565638d08e00f6
- SSDEEP 12288:XwKfOVRo9yRYHSbLmA4O8b8ITDnlr0xWVp:XxWVeyRYybLmA4O8b8ITDnl9p
- TLSH T1E1150923F1D4C021D4A73E3009AA8EA4FA36BC416AE487D7365C3B4D6F767A1ED25316
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
6/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-06-30_f4f61e5bf14bbbf7298d1d49b6f2b273_elex_glassworm_remcos_smoke-loader_stealc_stop_tofsee.exe
Resource
win10v2004-20260513-en
8 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-06-30_f4f61e5bf14bbbf7298d1d49b6f2b273_elex_glassworm_remcos_smoke-loader_stealc_stop_tofsee.exe
Resource
win11ltsc2024-20260629-en
8 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-06-30_f4f61e5bf14bbbf7298d1d49b6f2b273_elex_glassworm_remcos_smoke-loader_stealc_stop_tofsee
- Size 927KB
- SHA256 f7dc0eed35eed428f91a729360ff7a2c8ae500e5cb32767492904274edc05135
- MD5 f4f61e5bf14bbbf7298d1d49b6f2b273
- SHA1 0803b4cbbecd87342eb32abe54a4642e65f0164b
- SHA512 b653656f11ee9f9e267f7f68c4821dab6e297fe1d11dd5ddd5c8898316b1f99a91072eac234eded96fe66a6e258307c01b4cf29af7e1a5698b565638d08e00f6
- SSDEEP 12288:XwKfOVRo9yRYHSbLmA4O8b8ITDnlr0xWVp:XxWVeyRYybLmA4O8b8ITDnl9p
- TLSH T1E1150923F1D4C021D4A73E3009AA8EA4FA36BC416AE487D7365C3B4D6F767A1ED25316
- MD5 SHA1 SHA512 SSDEEP TLSH
Score6/10-
Adds Run key to start application
-
Checks installed software on the system
Looks up Uninstall key entries in the registry to enumerate software on the system.
-
Drops file in System32 directory