General
- Target 2026-07-05_503490fadce0aa9393c4c3117f6ed7ee_coinminer_elex_glassworm_remcos_smoke-loader_stealc_stop_tofsee
- Size 898KB
- Sample260705-tm6c2adx9x
- SHA256 4a32578fb8ae69a8d7ccb33e839b2ac192650fae80a4f63b034d1844d3d9cf26
- MD5 503490fadce0aa9393c4c3117f6ed7ee
- SHA1 5b0a42304f423ceb0a25417400f94ff8df01ebaa
- SHA512 671be35c3a2646255256a8727d6252731bd13cff211e3b9b725ee48a576bab8ca748759cf5f2b4fc4c115b038e40bc3cd53f278a56eee3e92aceb5c3ba444dd6
- SSDEEP 12288:IwKfOVRo9yRYYcT4O8b8ITDnlI07IhQj3c8/K:IxWVeyRYYk4O8b8ITDnl1Iu48/K
- TLSH T14615C731B7E58021F4BF3B344D764AA46A36BC126EB4C66F3668374D5F31A60CD2172A
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
6/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-07-05_503490fadce0aa9393c4c3117f6ed7ee_coinminer_elex_glassworm_remcos_smoke-loader_stealc_stop_tofsee.exe
Resource
win10v2004-20260513-en
8 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-07-05_503490fadce0aa9393c4c3117f6ed7ee_coinminer_elex_glassworm_remcos_smoke-loader_stealc_stop_tofsee.exe
Resource
win11ltsc2024-20260629-en
8 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-07-05_503490fadce0aa9393c4c3117f6ed7ee_coinminer_elex_glassworm_remcos_smoke-loader_stealc_stop_tofsee
- Size 898KB
- SHA256 4a32578fb8ae69a8d7ccb33e839b2ac192650fae80a4f63b034d1844d3d9cf26
- MD5 503490fadce0aa9393c4c3117f6ed7ee
- SHA1 5b0a42304f423ceb0a25417400f94ff8df01ebaa
- SHA512 671be35c3a2646255256a8727d6252731bd13cff211e3b9b725ee48a576bab8ca748759cf5f2b4fc4c115b038e40bc3cd53f278a56eee3e92aceb5c3ba444dd6
- SSDEEP 12288:IwKfOVRo9yRYYcT4O8b8ITDnlI07IhQj3c8/K:IxWVeyRYYk4O8b8ITDnl1Iu48/K
- TLSH T14615C731B7E58021F4BF3B344D764AA46A36BC126EB4C66F3668374D5F31A60CD2172A
- MD5 SHA1 SHA512 SSDEEP TLSH
Score6/10-
Adds Run key to start application
-
Checks installed software on the system
Looks up Uninstall key entries in the registry to enumerate software on the system.
-
Drops file in System32 directory