General
- Target 2026-07-05_1e5bd2ab2d34a47cad621e8d36717f7c_elex_glassworm_remcos_smoke-loader_stealc_stop_tofsee
- Size 1.2MB
- Sample260705-tstlesdz3z
- SHA256 8ba5ca0b06600aacd723486ba2dee6d40942302b16816531a5d54a3c7a5907f0
- MD5 1e5bd2ab2d34a47cad621e8d36717f7c
- SHA1 886cbd3e4d83abeb38567790d5c040fe910d836f
- SHA512 ac704ab1151b87a4983aa2d1ad94e0f5db6b3d37cf465d2326786334abe4a72c04e57b605202e445ad7a464ac36ae6bf0efb8ec0e64abe170cadafa6dcfbe6e5
- SSDEEP 12288:3wKfOVRo9yRYMEO7WLms4O8b8ITDnlW0c7ANaSA8yvkXHWJ3yf5:3xWVeyRYMH7WLms4O8b8ITDnl9yMXhf5
- TLSH T1F7554B36F6D0C021D6627E304D6A8AB0F636BC456EE4968B325C3B4E7F713A1DD29316
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
6/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-07-05_1e5bd2ab2d34a47cad621e8d36717f7c_elex_glassworm_remcos_smoke-loader_stealc_stop_tofsee.exe
Resource
win10v2004-20260513-en
8 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-07-05_1e5bd2ab2d34a47cad621e8d36717f7c_elex_glassworm_remcos_smoke-loader_stealc_stop_tofsee.exe
Resource
win11ltsc2024-20260629-en
8 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-07-05_1e5bd2ab2d34a47cad621e8d36717f7c_elex_glassworm_remcos_smoke-loader_stealc_stop_tofsee
- Size 1.2MB
- SHA256 8ba5ca0b06600aacd723486ba2dee6d40942302b16816531a5d54a3c7a5907f0
- MD5 1e5bd2ab2d34a47cad621e8d36717f7c
- SHA1 886cbd3e4d83abeb38567790d5c040fe910d836f
- SHA512 ac704ab1151b87a4983aa2d1ad94e0f5db6b3d37cf465d2326786334abe4a72c04e57b605202e445ad7a464ac36ae6bf0efb8ec0e64abe170cadafa6dcfbe6e5
- SSDEEP 12288:3wKfOVRo9yRYMEO7WLms4O8b8ITDnlW0c7ANaSA8yvkXHWJ3yf5:3xWVeyRYMH7WLms4O8b8ITDnl9yMXhf5
- TLSH T1F7554B36F6D0C021D6627E304D6A8AB0F636BC456EE4968B325C3B4E7F713A1DD29316
- MD5 SHA1 SHA512 SSDEEP TLSH
Score6/10-
Adds Run key to start application
-
Checks installed software on the system
Looks up Uninstall key entries in the registry to enumerate software on the system.
-
Drops file in System32 directory