General
- Target 2026-07-05_af7dd6dad34a914b37840313d6da6a9c_elex_glassworm_remcos_smoke-loader_stealc_stop_tofsee
- Size 1.4MB
- Sample260705-td291shs5k
- SHA256 18096f341429a7e24a2b58bfe4482bd3b93b73abe077f221df913282a27c7cff
- MD5 af7dd6dad34a914b37840313d6da6a9c
- SHA1 1aa343aaac2c966f24cba6b266f34f02411ad5f5
- SHA512 b021f37c207d96110cb3c6ff1dffd78f40a0471f601b8482a8ee313fda94f083a2d7ff5bed7641d5c0707d213581f12f3a235061796bfa50d769fa64ad78d83a
- SSDEEP 12288:pwKfOVRo9yRYXSJwzYDteYIpREr0RwNaSCDXVIm7EiET:pxWVeyRYiJwzYDteYIp6arET
- TLSH T11C659416B7E88155F5B36F309DB582A4EB36BC626E35CA4F3244374E6E71B808D21732
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
6/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-07-05_af7dd6dad34a914b37840313d6da6a9c_elex_glassworm_remcos_smoke-loader_stealc_stop_tofsee.exe
Resource
win10v2004-20260513-en
8 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-07-05_af7dd6dad34a914b37840313d6da6a9c_elex_glassworm_remcos_smoke-loader_stealc_stop_tofsee.exe
Resource
win11ltsc2024-20260630-en
8 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-07-05_af7dd6dad34a914b37840313d6da6a9c_elex_glassworm_remcos_smoke-loader_stealc_stop_tofsee
- Size 1.4MB
- SHA256 18096f341429a7e24a2b58bfe4482bd3b93b73abe077f221df913282a27c7cff
- MD5 af7dd6dad34a914b37840313d6da6a9c
- SHA1 1aa343aaac2c966f24cba6b266f34f02411ad5f5
- SHA512 b021f37c207d96110cb3c6ff1dffd78f40a0471f601b8482a8ee313fda94f083a2d7ff5bed7641d5c0707d213581f12f3a235061796bfa50d769fa64ad78d83a
- SSDEEP 12288:pwKfOVRo9yRYXSJwzYDteYIpREr0RwNaSCDXVIm7EiET:pxWVeyRYiJwzYDteYIp6arET
- TLSH T11C659416B7E88155F5B36F309DB582A4EB36BC626E35CA4F3244374E6E71B808D21732
- MD5 SHA1 SHA512 SSDEEP TLSH
Score6/10-
Adds Run key to start application
-
Checks installed software on the system
Looks up Uninstall key entries in the registry to enumerate software on the system.
-
Drops file in System32 directory