General
- Target 2026-07-05_ffd3460b83badd779545d39caa270f5f_elex_glassworm_remcos_smoke-loader_stealc_stop_tofsee
- Size 1.1MB
- Sample260705-s37elads7v
- SHA256 af8b29baf3d7b985bb276284a3fd0f29d2ae9ca96e4dc65dbfd567ee9ba50e5f
- MD5 ffd3460b83badd779545d39caa270f5f
- SHA1 0ed9e5fd6ab59b22604a02edefac67ad69a82256
- SHA512 c687d78474aaabb55ed7fd04a1be879ec1869f8299ad55fa9c9cacd32775a88548f06ae9e6e54814d5d8000d2cefe41d97dc3af947b1df82fd04ff0e6a84ca89
- SSDEEP 12288:6wKfOVRo9yRYekLmO4O8b8ITDnlW0zy90mDXVwX+:6xWVeyRYekLmO4O8b8ITDnlXyhI+
- TLSH T1A9354A36F6D4C021D5A67E304DAB4EA0FA36BC056AE4878B364C3B4E6F717A1DC25316
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
6/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-07-05_ffd3460b83badd779545d39caa270f5f_elex_glassworm_remcos_smoke-loader_stealc_stop_tofsee.exe
Resource
win10v2004-20260513-en
8 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-07-05_ffd3460b83badd779545d39caa270f5f_elex_glassworm_remcos_smoke-loader_stealc_stop_tofsee.exe
Resource
win11ltsc2024-20260629-en
8 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-07-05_ffd3460b83badd779545d39caa270f5f_elex_glassworm_remcos_smoke-loader_stealc_stop_tofsee
- Size 1.1MB
- SHA256 af8b29baf3d7b985bb276284a3fd0f29d2ae9ca96e4dc65dbfd567ee9ba50e5f
- MD5 ffd3460b83badd779545d39caa270f5f
- SHA1 0ed9e5fd6ab59b22604a02edefac67ad69a82256
- SHA512 c687d78474aaabb55ed7fd04a1be879ec1869f8299ad55fa9c9cacd32775a88548f06ae9e6e54814d5d8000d2cefe41d97dc3af947b1df82fd04ff0e6a84ca89
- SSDEEP 12288:6wKfOVRo9yRYekLmO4O8b8ITDnlW0zy90mDXVwX+:6xWVeyRYekLmO4O8b8ITDnlXyhI+
- TLSH T1A9354A36F6D4C021D5A67E304DAB4EA0FA36BC056AE4878B364C3B4E6F717A1DC25316
- MD5 SHA1 SHA512 SSDEEP TLSH
Score6/10-
Adds Run key to start application
-
Checks installed software on the system
Looks up Uninstall key entries in the registry to enumerate software on the system.
-
Drops file in System32 directory