General
- Target 2026-07-01_58b2dede9853323f3943441dae799c77_coinminer_elex_glassworm_remcos_smoke-loader_stealc_stop_tofsee
- Size 1.2MB
- Sample260701-ss3cwsg17j
- SHA256 ac16d260fe2627ab62d80565e54cdf0d8b804cee9833ce12839dd54934a62adb
- MD5 58b2dede9853323f3943441dae799c77
- SHA1 07f2db42f692670e49659363daf1d55f980c6dbf
- SHA512 1440499d9ed8d73c6c1ab7c737a4cb7751e539c3488f325d4f169b9b94af036308973f41acf1d219d2ae4c4190589522ac85a37885fac934db2c01a7098ce293
- SSDEEP 24576:wxWVeyRYq/Lmk+u4QnXZZ+zC6tIpEx4O8b8ITDnluChfZ:w8YM+uznXZZ+zC6tIpEx4O8b8ITDnlu+
- TLSH T11E453A62F180C920C9AB3638CD6B8D987B21BC126EB0979736DC7B1D6F756A0DD35306
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
6/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-07-01_58b2dede9853323f3943441dae799c77_coinminer_elex_glassworm_remcos_smoke-loader_stealc_stop_tofsee.exe
Resource
win10v2004-20260513-en
8 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-07-01_58b2dede9853323f3943441dae799c77_coinminer_elex_glassworm_remcos_smoke-loader_stealc_stop_tofsee.exe
Resource
win11ltsc2024-20260630-en
8 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-07-01_58b2dede9853323f3943441dae799c77_coinminer_elex_glassworm_remcos_smoke-loader_stealc_stop_tofsee
- Size 1.2MB
- SHA256 ac16d260fe2627ab62d80565e54cdf0d8b804cee9833ce12839dd54934a62adb
- MD5 58b2dede9853323f3943441dae799c77
- SHA1 07f2db42f692670e49659363daf1d55f980c6dbf
- SHA512 1440499d9ed8d73c6c1ab7c737a4cb7751e539c3488f325d4f169b9b94af036308973f41acf1d219d2ae4c4190589522ac85a37885fac934db2c01a7098ce293
- SSDEEP 24576:wxWVeyRYq/Lmk+u4QnXZZ+zC6tIpEx4O8b8ITDnluChfZ:w8YM+uznXZZ+zC6tIpEx4O8b8ITDnlu+
- TLSH T11E453A62F180C920C9AB3638CD6B8D987B21BC126EB0979736DC7B1D6F756A0DD35306
- MD5 SHA1 SHA512 SSDEEP TLSH
Score6/10-
Adds Run key to start application
-
Checks installed software on the system
Looks up Uninstall key entries in the registry to enumerate software on the system.
-
Drops file in System32 directory