General
- Target 2026-07-04_b0d4627a633cb295796ede4f9f99b986_elex_glassworm_remcos_smoke-loader_stealc_stop_tofsee
- Size 806KB
- Sample260704-was82saz2w
- SHA256 419989eff19800af73d540917b02d9acc12d0dc1ee19747f59247f70bff9e1e1
- MD5 b0d4627a633cb295796ede4f9f99b986
- SHA1 1f0004996abf82484d033d57ca7b89f5a6de72ea
- SHA512 5a9a5606cc13c3fd9f40f698c75d1e9a138d755657e201f791bd80bcd8cdf1bf04bbee3aba9672d3ea35d6ae2050004e9c671ab8ecbc3b157421abd53c2a3567
- SSDEEP 12288:RwKfOVRo9yRY8j4O8b8ITDnlL0i3miEMsX2d:RxWVeyRY8j4O8b8ITDnl/3nbd
- TLSH T1FA052831B6D4D025E4A23A344DBB8EA47625BC126FF5C68B764C370E6F716B1CD2132A
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
6/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-07-04_b0d4627a633cb295796ede4f9f99b986_elex_glassworm_remcos_smoke-loader_stealc_stop_tofsee.exe
Resource
win10v2004-20260513-en
8 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-07-04_b0d4627a633cb295796ede4f9f99b986_elex_glassworm_remcos_smoke-loader_stealc_stop_tofsee.exe
Resource
win11ltsc2024-20260629-en
8 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-07-04_b0d4627a633cb295796ede4f9f99b986_elex_glassworm_remcos_smoke-loader_stealc_stop_tofsee
- Size 806KB
- SHA256 419989eff19800af73d540917b02d9acc12d0dc1ee19747f59247f70bff9e1e1
- MD5 b0d4627a633cb295796ede4f9f99b986
- SHA1 1f0004996abf82484d033d57ca7b89f5a6de72ea
- SHA512 5a9a5606cc13c3fd9f40f698c75d1e9a138d755657e201f791bd80bcd8cdf1bf04bbee3aba9672d3ea35d6ae2050004e9c671ab8ecbc3b157421abd53c2a3567
- SSDEEP 12288:RwKfOVRo9yRY8j4O8b8ITDnlL0i3miEMsX2d:RxWVeyRY8j4O8b8ITDnl/3nbd
- TLSH T1FA052831B6D4D025E4A23A344DBB8EA47625BC126FF5C68B764C370E6F716B1CD2132A
- MD5 SHA1 SHA512 SSDEEP TLSH
Score6/10-
Adds Run key to start application
-
Checks installed software on the system
Looks up Uninstall key entries in the registry to enumerate software on the system.
-
Drops file in System32 directory