General
- Target 2026-07-05_79f713844b74f79ef61a7f976c22682b_elex_glassworm_remcos_smoke-loader_stealc_stop_tofsee
- Size 1.5MB
- Sample260705-fr688sdv4r
- SHA256 951e5ee1f0dbff5704d693df3c60be007bbda0ff578e7212483914335e69954c
- MD5 79f713844b74f79ef61a7f976c22682b
- SHA1 876242f1081c71a3c1d4a39012c3bb2c0d092d1a
- SHA512 98fadbad3d563c4aa065bef1fb6f1f8ec878f53da1fa03516c08e6dd9a3d950583e9e019d1feaa570d07cfe9bdac87a14d685647d4d93c735448c20957fdd502
- SSDEEP 24576:mxWVeyRYMv4s2hzy4O8b8ITDnlRaYVz5C+r/C6:m8Y8zuzy4O8b8ITDnlRXVz5CG3
- TLSH T12175942D66B0CA11E2AB663078734A5725227C315EEC8FCA3345BF4A7BB1E64CD61713
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
6/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-07-05_79f713844b74f79ef61a7f976c22682b_elex_glassworm_remcos_smoke-loader_stealc_stop_tofsee.exe
Resource
win10v2004-20260513-en
8 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-07-05_79f713844b74f79ef61a7f976c22682b_elex_glassworm_remcos_smoke-loader_stealc_stop_tofsee.exe
Resource
win11ltsc2024-20260629-en
8 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-07-05_79f713844b74f79ef61a7f976c22682b_elex_glassworm_remcos_smoke-loader_stealc_stop_tofsee
- Size 1.5MB
- SHA256 951e5ee1f0dbff5704d693df3c60be007bbda0ff578e7212483914335e69954c
- MD5 79f713844b74f79ef61a7f976c22682b
- SHA1 876242f1081c71a3c1d4a39012c3bb2c0d092d1a
- SHA512 98fadbad3d563c4aa065bef1fb6f1f8ec878f53da1fa03516c08e6dd9a3d950583e9e019d1feaa570d07cfe9bdac87a14d685647d4d93c735448c20957fdd502
- SSDEEP 24576:mxWVeyRYMv4s2hzy4O8b8ITDnlRaYVz5C+r/C6:m8Y8zuzy4O8b8ITDnlRXVz5CG3
- TLSH T12175942D66B0CA11E2AB663078734A5725227C315EEC8FCA3345BF4A7BB1E64CD61713
- MD5 SHA1 SHA512 SSDEEP TLSH
Score6/10-
Adds Run key to start application
-
Checks installed software on the system
Looks up Uninstall key entries in the registry to enumerate software on the system.
-
Drops file in System32 directory