General
- Target 2026-07-05_1a05f809f6ef99b2821c473735fba60b_elex_glassworm_remcos_smoke-loader_stealc_stop_tofsee
- Size 1.6MB
- Sample260705-vvarrsh19p
- SHA256 492baad3748b7d5499843f92dcc2f9270382243493623cc5a5f7068a22186729
- MD5 1a05f809f6ef99b2821c473735fba60b
- SHA1 f063d01e966d26c99d1b64c54a9f6623c2c18474
- SHA512 bb4e2b23bd1f039d8185ee7a19e8103fb4555f7b04af7c56fa20d6b99a7f56464803a477830a05fa2cef4386d7877a1b0a71fa4bf6355259ef9e0298ad92cdf3
- SSDEEP 12288:UwKfOVRo9yRYjl1wzYDteYIpREr0kbAPPAHwNaSCDXV8SFEFEX:UxWVeyRYZ1wzYDteYIp6bAQB2EX
- TLSH T11785B401B7E8A095F2B36F7899B64294D7367C72AE348A4F3644B74E3E717809921337
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
6/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-07-05_1a05f809f6ef99b2821c473735fba60b_elex_glassworm_remcos_smoke-loader_stealc_stop_tofsee.exe
Resource
win10v2004-20260513-en
8 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-07-05_1a05f809f6ef99b2821c473735fba60b_elex_glassworm_remcos_smoke-loader_stealc_stop_tofsee.exe
Resource
win11ltsc2024-20260630-en
8 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-07-05_1a05f809f6ef99b2821c473735fba60b_elex_glassworm_remcos_smoke-loader_stealc_stop_tofsee
- Size 1.6MB
- SHA256 492baad3748b7d5499843f92dcc2f9270382243493623cc5a5f7068a22186729
- MD5 1a05f809f6ef99b2821c473735fba60b
- SHA1 f063d01e966d26c99d1b64c54a9f6623c2c18474
- SHA512 bb4e2b23bd1f039d8185ee7a19e8103fb4555f7b04af7c56fa20d6b99a7f56464803a477830a05fa2cef4386d7877a1b0a71fa4bf6355259ef9e0298ad92cdf3
- SSDEEP 12288:UwKfOVRo9yRYjl1wzYDteYIpREr0kbAPPAHwNaSCDXV8SFEFEX:UxWVeyRYZ1wzYDteYIp6bAQB2EX
- TLSH T11785B401B7E8A095F2B36F7899B64294D7367C72AE348A4F3644B74E3E717809921337
- MD5 SHA1 SHA512 SSDEEP TLSH
Score6/10-
Adds Run key to start application
-
Checks installed software on the system
Looks up Uninstall key entries in the registry to enumerate software on the system.
-
Drops file in System32 directory