General
- Target 2026-07-05_cada9c3521c2a7eb9a7b18d9751f2017_elex_glassworm_remcos_smoke-loader_stealc_stop_tofsee
- Size 1.4MB
- Sample260705-ta2jbag17n
- SHA256 8eec0eee8d670d814a970ca0c874a6802320f527eafe55742f05dc81b2abca61
- MD5 cada9c3521c2a7eb9a7b18d9751f2017
- SHA1 75eedf137c8de106d14deb59f50fb8dfc2451def
- SHA512 4799b40f3d03e2939965909e01c286a544cfee6872750721ba3fa2776bfe687ceed93bd9ec7df73e508a42db06957aa1dfd9e2600e1eafcf439c662b2e693917
- SSDEEP 12288:vwKfOVRo9yRYOLmz4O8b8ITDnlr0bJUqm/VkUu+K6cNaSpDXVncfX:vxWVeyRYOLmz4O8b8ITDnlAKqEksKfgX
- TLSH T13B654B32F2C0C065D1667E3049AA8EB0F637BC556AE48B5B724C3B4E6F713A1DC26716
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
6/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-07-05_cada9c3521c2a7eb9a7b18d9751f2017_elex_glassworm_remcos_smoke-loader_stealc_stop_tofsee.exe
Resource
win10v2004-20260513-en
8 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-07-05_cada9c3521c2a7eb9a7b18d9751f2017_elex_glassworm_remcos_smoke-loader_stealc_stop_tofsee.exe
Resource
win11ltsc2024-20260629-en
8 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-07-05_cada9c3521c2a7eb9a7b18d9751f2017_elex_glassworm_remcos_smoke-loader_stealc_stop_tofsee
- Size 1.4MB
- SHA256 8eec0eee8d670d814a970ca0c874a6802320f527eafe55742f05dc81b2abca61
- MD5 cada9c3521c2a7eb9a7b18d9751f2017
- SHA1 75eedf137c8de106d14deb59f50fb8dfc2451def
- SHA512 4799b40f3d03e2939965909e01c286a544cfee6872750721ba3fa2776bfe687ceed93bd9ec7df73e508a42db06957aa1dfd9e2600e1eafcf439c662b2e693917
- SSDEEP 12288:vwKfOVRo9yRYOLmz4O8b8ITDnlr0bJUqm/VkUu+K6cNaSpDXVncfX:vxWVeyRYOLmz4O8b8ITDnlAKqEksKfgX
- TLSH T13B654B32F2C0C065D1667E3049AA8EB0F637BC556AE48B5B724C3B4E6F713A1DC26716
- MD5 SHA1 SHA512 SSDEEP TLSH
Score6/10-
Adds Run key to start application
-
Checks installed software on the system
Looks up Uninstall key entries in the registry to enumerate software on the system.
-
Drops file in System32 directory