General
- Target 2026-07-05_e6f54571640c3f33cad0e76749b4f8b4_elex_glassworm_remcos_smoke-loader_stealc_stop_tofsee
- Size 798KB
- Sample260705-s7dcbadt5v
- SHA256 585615efcc86bd438353d73a73e2470614405e04f35b131cf76913789d18c98b
- MD5 e6f54571640c3f33cad0e76749b4f8b4
- SHA1 77bf1f4b711e45b6f1f27081fc58ec92c6ed0452
- SHA512 cba6597e17bf23ce421cc1a1150c30d9f970147b77b7c3856e61f7da8e8b84d3fa8bcbaee204a2df1505c356cebb83a5630dfcae185742db6fe3ff4d7bf593de
- SSDEEP 12288:VwKfOVRo9yRY7wS14O8b8ITDnl20iBoKWIwt:VxWVeyRY7n14O8b8ITDnlWmKKt
- TLSH T10E05D531B6D4DA21D4AB36344D6A8EA47627BC126EA587CB36483F4E7F306B1CD21317
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
6/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-07-05_e6f54571640c3f33cad0e76749b4f8b4_elex_glassworm_remcos_smoke-loader_stealc_stop_tofsee.exe
Resource
win10v2004-20260513-en
8 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-07-05_e6f54571640c3f33cad0e76749b4f8b4_elex_glassworm_remcos_smoke-loader_stealc_stop_tofsee.exe
Resource
win11ltsc2024-20260629-en
8 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-07-05_e6f54571640c3f33cad0e76749b4f8b4_elex_glassworm_remcos_smoke-loader_stealc_stop_tofsee
- Size 798KB
- SHA256 585615efcc86bd438353d73a73e2470614405e04f35b131cf76913789d18c98b
- MD5 e6f54571640c3f33cad0e76749b4f8b4
- SHA1 77bf1f4b711e45b6f1f27081fc58ec92c6ed0452
- SHA512 cba6597e17bf23ce421cc1a1150c30d9f970147b77b7c3856e61f7da8e8b84d3fa8bcbaee204a2df1505c356cebb83a5630dfcae185742db6fe3ff4d7bf593de
- SSDEEP 12288:VwKfOVRo9yRY7wS14O8b8ITDnl20iBoKWIwt:VxWVeyRY7n14O8b8ITDnlWmKKt
- TLSH T10E05D531B6D4DA21D4AB36344D6A8EA47627BC126EA587CB36483F4E7F306B1CD21317
- MD5 SHA1 SHA512 SSDEEP TLSH
Score6/10-
Adds Run key to start application
-
Checks installed software on the system
Looks up Uninstall key entries in the registry to enumerate software on the system.
-
Drops file in System32 directory