General
- Target 2026-07-05_85002566a65e2737727feb56b653d78f_elex_glassworm_remcos_smoke-loader_stealc_stop_tofsee
- Size 1.3MB
- Sample260705-fpwpqahy6v
- SHA256 3f6cb66042c5d323743688b42b63de63efe945f0b064edb3f9ae7aa4b94688fa
- MD5 85002566a65e2737727feb56b653d78f
- SHA1 6a4959de0aa5d0cd20ab6665905fd715063afc26
- SHA512 dc8a00b5a14a554a9349b1c94ca3df5e389cb7231cd7e5dec7bc61143c93ff8162cb393235ca0a4de5fdd4689d58ef12b7508450ef479249437018d5f5152d0f
- SSDEEP 12288:LwKfOVRo9yRYSv42X5sUSF14tp4O8b8ITDnlZRPiwAYpGdM1+Jt:LxWVeyRYSv4s2hzy4O8b8ITDnlZzpuJt
- TLSH T1A055D52066E4CE11F2FB763088754A202927BC515EF887CE334ABF5A7BB16A4CD65713
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
6/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-07-05_85002566a65e2737727feb56b653d78f_elex_glassworm_remcos_smoke-loader_stealc_stop_tofsee.exe
Resource
win10v2004-20260513-en
8 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-07-05_85002566a65e2737727feb56b653d78f_elex_glassworm_remcos_smoke-loader_stealc_stop_tofsee.exe
Resource
win11ltsc2024-20260629-en
8 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-07-05_85002566a65e2737727feb56b653d78f_elex_glassworm_remcos_smoke-loader_stealc_stop_tofsee
- Size 1.3MB
- SHA256 3f6cb66042c5d323743688b42b63de63efe945f0b064edb3f9ae7aa4b94688fa
- MD5 85002566a65e2737727feb56b653d78f
- SHA1 6a4959de0aa5d0cd20ab6665905fd715063afc26
- SHA512 dc8a00b5a14a554a9349b1c94ca3df5e389cb7231cd7e5dec7bc61143c93ff8162cb393235ca0a4de5fdd4689d58ef12b7508450ef479249437018d5f5152d0f
- SSDEEP 12288:LwKfOVRo9yRYSv42X5sUSF14tp4O8b8ITDnlZRPiwAYpGdM1+Jt:LxWVeyRYSv4s2hzy4O8b8ITDnlZzpuJt
- TLSH T1A055D52066E4CE11F2FB763088754A202927BC515EF887CE334ABF5A7BB16A4CD65713
- MD5 SHA1 SHA512 SSDEEP TLSH
Score6/10-
Adds Run key to start application
-
Checks installed software on the system
Looks up Uninstall key entries in the registry to enumerate software on the system.
-
Drops file in System32 directory