General
- Target 2026-07-04_53297d9dbebeadd6625ef713037cce89_coinminer_elex_glassworm_remcos_smoke-loader_stealc_stop_tofsee
- Size 4.0MB
- Sample260704-svy39ahs2x
- SHA256 ee2270da03c2a1e0241722392fd34cb28be3ddd6ea4ef2d5f59fe242fa543269
- MD5 53297d9dbebeadd6625ef713037cce89
- SHA1 83d9df0677dad18cdac362c7ab59ace17a6a91ea
- SHA512 595fbf85f4b1b3d6c9dbed6820110d2f457b9be1e4bcc5d76db896010b1beceb67609c5ec83d376af1d4e385ef96af2a58014c29fac1d681be7a616b9799f66b
- SSDEEP 49152:u8YO65UKDlbnwVtYA4AB+mmHmQFFie4O8b8ITDnlv:b9/KVwIAfmHmQDY
- TLSH T1B41618F0A18C496FDF161EB0242C4BE7F2363D850B999FD6689533CE39B67294A07706
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
6/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-07-04_53297d9dbebeadd6625ef713037cce89_coinminer_elex_glassworm_remcos_smoke-loader_stealc_stop_tofsee.exe
Resource
win10v2004-20260513-en
8 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-07-04_53297d9dbebeadd6625ef713037cce89_coinminer_elex_glassworm_remcos_smoke-loader_stealc_stop_tofsee.exe
Resource
win11ltsc2024-20260629-en
8 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-07-04_53297d9dbebeadd6625ef713037cce89_coinminer_elex_glassworm_remcos_smoke-loader_stealc_stop_tofsee
- Size 4.0MB
- SHA256 ee2270da03c2a1e0241722392fd34cb28be3ddd6ea4ef2d5f59fe242fa543269
- MD5 53297d9dbebeadd6625ef713037cce89
- SHA1 83d9df0677dad18cdac362c7ab59ace17a6a91ea
- SHA512 595fbf85f4b1b3d6c9dbed6820110d2f457b9be1e4bcc5d76db896010b1beceb67609c5ec83d376af1d4e385ef96af2a58014c29fac1d681be7a616b9799f66b
- SSDEEP 49152:u8YO65UKDlbnwVtYA4AB+mmHmQFFie4O8b8ITDnlv:b9/KVwIAfmHmQDY
- TLSH T1B41618F0A18C496FDF161EB0242C4BE7F2363D850B999FD6689533CE39B67294A07706
- MD5 SHA1 SHA512 SSDEEP TLSH
Score6/10-
Adds Run key to start application
-
Checks installed software on the system
Looks up Uninstall key entries in the registry to enumerate software on the system.
-
Drops file in System32 directory