General
- Target 2026-06-30_8f7920c8d67f3acfcc890b4a1c2b7fc6_elex_glassworm_remcos_smoke-loader_stealc_stop_tofsee
- Size 2.1MB
- Sample260701-eetlyafx7y
- SHA256 cf47eca2860e2f0c3c4cb6e839d99115f290d23910aebff4cf18c656476b3f7a
- MD5 8f7920c8d67f3acfcc890b4a1c2b7fc6
- SHA1 875af4190a98aacd52cace173976625fdecb62d3
- SHA512 45af2bc8cc483b89ecb66cf081c15899f9d6dbb735b5c7fd08bd7884a6052f2cea8bcdfd5a5da35eca5d47f5a7b52192fcea349d4901c55ed0658ce3c2056372
- SSDEEP 49152:u8YkR4OKS94lOSbOegMuR0DCdS4O8b8ITDnlk2:b7H9WOme/dg2
- TLSH T16AA5BF22F1D0C021E5A73F3009BA4EA4FA36BC416AE45797325C3B4D6F717A1ED2971A
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
6/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-06-30_8f7920c8d67f3acfcc890b4a1c2b7fc6_elex_glassworm_remcos_smoke-loader_stealc_stop_tofsee.exe
Resource
win10v2004-20260513-en
8 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-06-30_8f7920c8d67f3acfcc890b4a1c2b7fc6_elex_glassworm_remcos_smoke-loader_stealc_stop_tofsee.exe
Resource
win11ltsc2024-20260630-en
8 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-06-30_8f7920c8d67f3acfcc890b4a1c2b7fc6_elex_glassworm_remcos_smoke-loader_stealc_stop_tofsee
- Size 2.1MB
- SHA256 cf47eca2860e2f0c3c4cb6e839d99115f290d23910aebff4cf18c656476b3f7a
- MD5 8f7920c8d67f3acfcc890b4a1c2b7fc6
- SHA1 875af4190a98aacd52cace173976625fdecb62d3
- SHA512 45af2bc8cc483b89ecb66cf081c15899f9d6dbb735b5c7fd08bd7884a6052f2cea8bcdfd5a5da35eca5d47f5a7b52192fcea349d4901c55ed0658ce3c2056372
- SSDEEP 49152:u8YkR4OKS94lOSbOegMuR0DCdS4O8b8ITDnlk2:b7H9WOme/dg2
- TLSH T16AA5BF22F1D0C021E5A73F3009BA4EA4FA36BC416AE45797325C3B4D6F717A1ED2971A
- MD5 SHA1 SHA512 SSDEEP TLSH
Score6/10-
Adds Run key to start application
-
Checks installed software on the system
Looks up Uninstall key entries in the registry to enumerate software on the system.
-
Drops file in System32 directory