General
- Target 2026-07-04_7e6ce9056891b0b4cb5e0b72b66638c6_elex_glassworm_remcos_smoke-loader_stealc_stop_tofsee
- Size 2.1MB
- Sample260704-exa8bae19r
- SHA256 90b6683951b04dc5b92d7eb2b2a40a60a4100e2310eb699bf6509841e66c1bef
- MD5 7e6ce9056891b0b4cb5e0b72b66638c6
- SHA1 225a3464ebc8894432e5b7013722593735810d36
- SHA512 6f25b6d49b35abf1b4cc36e23af7cff6115786cc253bb79e2eb7406796cca901fa845e6cedaf403cb15b804abb34b1b2702ea220eb952a22cf415c852cbf0b2a
- SSDEEP 24576:zxWVeyRYd4s2hzwA91xTVIlz7X9zOo4PjnikEpx/nLWvJ1Y:z8YdzuzwAlSR7Xgo4TiRPnLWvJa
- TLSH T1A7A5BD11B6E48020F5B37B349D7E82A44A36BC56AFF4D65F36487B5E6F30680B920736
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
6/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-07-04_7e6ce9056891b0b4cb5e0b72b66638c6_elex_glassworm_remcos_smoke-loader_stealc_stop_tofsee.exe
Resource
win10v2004-20260513-en
8 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-07-04_7e6ce9056891b0b4cb5e0b72b66638c6_elex_glassworm_remcos_smoke-loader_stealc_stop_tofsee.exe
Resource
win11ltsc2024-20260629-en
8 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-07-04_7e6ce9056891b0b4cb5e0b72b66638c6_elex_glassworm_remcos_smoke-loader_stealc_stop_tofsee
- Size 2.1MB
- SHA256 90b6683951b04dc5b92d7eb2b2a40a60a4100e2310eb699bf6509841e66c1bef
- MD5 7e6ce9056891b0b4cb5e0b72b66638c6
- SHA1 225a3464ebc8894432e5b7013722593735810d36
- SHA512 6f25b6d49b35abf1b4cc36e23af7cff6115786cc253bb79e2eb7406796cca901fa845e6cedaf403cb15b804abb34b1b2702ea220eb952a22cf415c852cbf0b2a
- SSDEEP 24576:zxWVeyRYd4s2hzwA91xTVIlz7X9zOo4PjnikEpx/nLWvJ1Y:z8YdzuzwAlSR7Xgo4TiRPnLWvJa
- TLSH T1A7A5BD11B6E48020F5B37B349D7E82A44A36BC56AFF4D65F36487B5E6F30680B920736
- MD5 SHA1 SHA512 SSDEEP TLSH
Score6/10-
Adds Run key to start application
-
Checks installed software on the system
Looks up Uninstall key entries in the registry to enumerate software on the system.
-
Drops file in System32 directory