General
- Target 2026-07-06_18addc1f9b85bf78ae064b6cdac90f89_elex_glassworm_remcos_smoke-loader_stealc_stop_tofsee
- Size 760KB
- Sample260706-2f3bsscy41
- SHA256 b6639ca806df915b241d36f50c73d19ea5977a74892f48c8947c5773d457c1a7
- MD5 18addc1f9b85bf78ae064b6cdac90f89
- SHA1 7d00c6e5e6a75157f4bd72cf157744859aa42ab6
- SHA512 22061db80038c717560242c1e32b3abb817cc4bad9c0b3c267b056aa119a381659603f0952d2b7eb864204c8f25087a530da15f57544914e02ebbacceae1f205
- SSDEEP 12288:awKfOVRo9yRY7wSY4O8b8ITDnl20dtaIoC:axWVeyRY7nY4O8b8ITDnlpteC
- TLSH T117F40931B6D4D021E4A23A344DBA8EA47A25BC126FF5C78B764C374E6F316B1DD2131A
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
6/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-07-06_18addc1f9b85bf78ae064b6cdac90f89_elex_glassworm_remcos_smoke-loader_stealc_stop_tofsee.exe
Resource
win10v2004-20260513-en
8 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-07-06_18addc1f9b85bf78ae064b6cdac90f89_elex_glassworm_remcos_smoke-loader_stealc_stop_tofsee.exe
Resource
win11ltsc2024-20260706-en
8 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-07-06_18addc1f9b85bf78ae064b6cdac90f89_elex_glassworm_remcos_smoke-loader_stealc_stop_tofsee
- Size 760KB
- SHA256 b6639ca806df915b241d36f50c73d19ea5977a74892f48c8947c5773d457c1a7
- MD5 18addc1f9b85bf78ae064b6cdac90f89
- SHA1 7d00c6e5e6a75157f4bd72cf157744859aa42ab6
- SHA512 22061db80038c717560242c1e32b3abb817cc4bad9c0b3c267b056aa119a381659603f0952d2b7eb864204c8f25087a530da15f57544914e02ebbacceae1f205
- SSDEEP 12288:awKfOVRo9yRY7wSY4O8b8ITDnl20dtaIoC:axWVeyRY7nY4O8b8ITDnlpteC
- TLSH T117F40931B6D4D021E4A23A344DBA8EA47A25BC126FF5C78B764C374E6F316B1DD2131A
- MD5 SHA1 SHA512 SSDEEP TLSH
Score6/10-
Adds Run key to start application
-
Checks installed software on the system
Looks up Uninstall key entries in the registry to enumerate software on the system.
-
Drops file in System32 directory