General
- Target 2026-07-04_9f01dbfd5bd83f0bbfe6ba334f008b65_elex_glassworm_remcos_smoke-loader_stealc_stop_tofsee
- Size 1.8MB
- Sample260704-ephx7aez7q
- SHA256 db9dead2d1c51a529ebdd7dfb3107febf1dafd71dca61583e670400e7bbc36a8
- MD5 9f01dbfd5bd83f0bbfe6ba334f008b65
- SHA1 83980a09fac486dfbbe3e45eaf7ef2525a43e7b3
- SHA512 2aaf195a8955dbb02f22c3200ef97040b4ac0d72815f29bea44b50756f4345cb1ed2bcd306f6efbe6d2a044dbe7d3fda9aef6aa7fe3ba8785847be54536cb706
- SSDEEP 12288:RwKfOVRo9yRYq42X5sUSF14tc8SVM+SV1dJ0Ra0MPUdyJS/2Ow2scysVgjttDWM7:RxWVeyRYq4s2hzntVIJqq5xe10Fg83R
- TLSH T15385F503B6E58513F1F3DE3049B9A97A1629BD9E5A3582CF764C324E5F31780DA31B22
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
6/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-07-04_9f01dbfd5bd83f0bbfe6ba334f008b65_elex_glassworm_remcos_smoke-loader_stealc_stop_tofsee.exe
Resource
win10v2004-20260513-en
8 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-07-04_9f01dbfd5bd83f0bbfe6ba334f008b65_elex_glassworm_remcos_smoke-loader_stealc_stop_tofsee.exe
Resource
win11ltsc2024-20260629-en
8 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-07-04_9f01dbfd5bd83f0bbfe6ba334f008b65_elex_glassworm_remcos_smoke-loader_stealc_stop_tofsee
- Size 1.8MB
- SHA256 db9dead2d1c51a529ebdd7dfb3107febf1dafd71dca61583e670400e7bbc36a8
- MD5 9f01dbfd5bd83f0bbfe6ba334f008b65
- SHA1 83980a09fac486dfbbe3e45eaf7ef2525a43e7b3
- SHA512 2aaf195a8955dbb02f22c3200ef97040b4ac0d72815f29bea44b50756f4345cb1ed2bcd306f6efbe6d2a044dbe7d3fda9aef6aa7fe3ba8785847be54536cb706
- SSDEEP 12288:RwKfOVRo9yRYq42X5sUSF14tc8SVM+SV1dJ0Ra0MPUdyJS/2Ow2scysVgjttDWM7:RxWVeyRYq4s2hzntVIJqq5xe10Fg83R
- TLSH T15385F503B6E58513F1F3DE3049B9A97A1629BD9E5A3582CF764C324E5F31780DA31B22
- MD5 SHA1 SHA512 SSDEEP TLSH
Score6/10-
Adds Run key to start application
-
Checks installed software on the system
Looks up Uninstall key entries in the registry to enumerate software on the system.
-
Drops file in System32 directory