General
- Target 2026-07-03_93fb12708caf878eb8b9b1d004738d39_elex_glassworm_remcos_smoke-loader_stealc_stop_tofsee
- Size 2.7MB
- Sample260703-rcfcrafw5l
- SHA256 83ea330017c5317c8ed81f6feb31c0d9a9da0ac95fa06f6d87a4c4caabcdf60b
- MD5 93fb12708caf878eb8b9b1d004738d39
- SHA1 e679d024e2afe6f58cf985d187e0517f8bfe72c6
- SHA512 b679438a7c1b83159f55ac069974551ccb1485811f8c0921d17843c8dc0950ac90924756a577064b76dc3a02f1ece29bbde2a7463c9ad44c7f15f6b9bb12600b
- SSDEEP 49152:C8YO/lPA552bT8TCKpxVt2sl0TD5yncADYOS0jZ2/vgm9m4O8b8ITDnlmM1X:XXIOoT9pnt9l45mcADRS0SRN1X
- TLSH T1F9D5BF62F290C025D1762F3049BA8EB0F637BC516AE0479B718C3B4D6F717A1ED2671A
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
6/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-07-03_93fb12708caf878eb8b9b1d004738d39_elex_glassworm_remcos_smoke-loader_stealc_stop_tofsee.exe
Resource
win10v2004-20260513-en
8 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-07-03_93fb12708caf878eb8b9b1d004738d39_elex_glassworm_remcos_smoke-loader_stealc_stop_tofsee.exe
Resource
win11ltsc2024-20260629-en
8 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-07-03_93fb12708caf878eb8b9b1d004738d39_elex_glassworm_remcos_smoke-loader_stealc_stop_tofsee
- Size 2.7MB
- SHA256 83ea330017c5317c8ed81f6feb31c0d9a9da0ac95fa06f6d87a4c4caabcdf60b
- MD5 93fb12708caf878eb8b9b1d004738d39
- SHA1 e679d024e2afe6f58cf985d187e0517f8bfe72c6
- SHA512 b679438a7c1b83159f55ac069974551ccb1485811f8c0921d17843c8dc0950ac90924756a577064b76dc3a02f1ece29bbde2a7463c9ad44c7f15f6b9bb12600b
- SSDEEP 49152:C8YO/lPA552bT8TCKpxVt2sl0TD5yncADYOS0jZ2/vgm9m4O8b8ITDnlmM1X:XXIOoT9pnt9l45mcADRS0SRN1X
- TLSH T1F9D5BF62F290C025D1762F3049BA8EB0F637BC516AE0479B718C3B4D6F717A1ED2671A
- MD5 SHA1 SHA512 SSDEEP TLSH
Score6/10-
Adds Run key to start application
-
Checks installed software on the system
Looks up Uninstall key entries in the registry to enumerate software on the system.
-
Drops file in System32 directory