General
- Target 2026-07-05_70eba8873d42968257d5d717675b37c3_elex_glassworm_remcos_smoke-loader_stealc_stop_tofsee
- Size 1.3MB
- Sample260705-ftbv4shz3x
- SHA256 b6d5c62ab51c9f1d966e7c414779ed9832807355956add6ec0246a21bb4b9ec0
- MD5 70eba8873d42968257d5d717675b37c3
- SHA1 d2469cb81c8f9df668df90df43c0854572395c0e
- SHA512 7dd4c44bb1769ce0db515dc77e0445a6568e9a926984158e4daf86b00387bfe2c5911443d4b7aa42f942f2fc406d294407b6909b7a65fc68cf1f93c100219b5a
- SSDEEP 12288:LwKfOVRo9yRYkv42X5sUSF14tp4O8b8ITDnlZRPiwAYpGdM1+Jt:LxWVeyRYkv4s2hzy4O8b8ITDnlZzpuJt
- TLSH T13C55D52066E4CE11F2FB763088754A202927BC515EF887CE334ABF5A7BB16A4CD65713
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
6/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-07-05_70eba8873d42968257d5d717675b37c3_elex_glassworm_remcos_smoke-loader_stealc_stop_tofsee.exe
Resource
win10v2004-20260513-en
8 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-07-05_70eba8873d42968257d5d717675b37c3_elex_glassworm_remcos_smoke-loader_stealc_stop_tofsee.exe
Resource
win11ltsc2024-20260629-en
8 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-07-05_70eba8873d42968257d5d717675b37c3_elex_glassworm_remcos_smoke-loader_stealc_stop_tofsee
- Size 1.3MB
- SHA256 b6d5c62ab51c9f1d966e7c414779ed9832807355956add6ec0246a21bb4b9ec0
- MD5 70eba8873d42968257d5d717675b37c3
- SHA1 d2469cb81c8f9df668df90df43c0854572395c0e
- SHA512 7dd4c44bb1769ce0db515dc77e0445a6568e9a926984158e4daf86b00387bfe2c5911443d4b7aa42f942f2fc406d294407b6909b7a65fc68cf1f93c100219b5a
- SSDEEP 12288:LwKfOVRo9yRYkv42X5sUSF14tp4O8b8ITDnlZRPiwAYpGdM1+Jt:LxWVeyRYkv4s2hzy4O8b8ITDnlZzpuJt
- TLSH T13C55D52066E4CE11F2FB763088754A202927BC515EF887CE334ABF5A7BB16A4CD65713
- MD5 SHA1 SHA512 SSDEEP TLSH
Score6/10-
Adds Run key to start application
-
Checks installed software on the system
Looks up Uninstall key entries in the registry to enumerate software on the system.
-
Drops file in System32 directory