General
- Target 2026-07-06_dcf1b088adefa352bff76ab66afd4c38_elex_glassworm_remcos_smoke-loader_stealc_stop_tofsee
- Size 1.4MB
- Sample260706-v5e48sd19q
- SHA256 d31f64329b14c929a156cccfd2af3b10303a19b29e277b8c8bde12cf380f27fe
- MD5 dcf1b088adefa352bff76ab66afd4c38
- SHA1 854d3a25dadd270a977f01e66c4cc535eeb5fd96
- SHA512 4631078967a697449ffca1c45d7b0d0f6443e59a34d91a43b6b726d63ba286da401677860802cb742e502bf5960ee48e2c2faebfb7456177d84988abae08f0b0
- SSDEEP 12288:hwKfOVRo9yRYjSrwzYDteYIpREr0RwNaSCDXVIm7EiEb:hxWVeyRYOrwzYDteYIp6arEb
- TLSH T1AB659416B7E88155F5B36F309DB582A4EB36BC626E35CA4F3244374E6E71B808D21732
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
6/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-07-06_dcf1b088adefa352bff76ab66afd4c38_elex_glassworm_remcos_smoke-loader_stealc_stop_tofsee.exe
Resource
win10v2004-20260513-en
8 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-07-06_dcf1b088adefa352bff76ab66afd4c38_elex_glassworm_remcos_smoke-loader_stealc_stop_tofsee.exe
Resource
win11ltsc2024-20260629-en
8 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-07-06_dcf1b088adefa352bff76ab66afd4c38_elex_glassworm_remcos_smoke-loader_stealc_stop_tofsee
- Size 1.4MB
- SHA256 d31f64329b14c929a156cccfd2af3b10303a19b29e277b8c8bde12cf380f27fe
- MD5 dcf1b088adefa352bff76ab66afd4c38
- SHA1 854d3a25dadd270a977f01e66c4cc535eeb5fd96
- SHA512 4631078967a697449ffca1c45d7b0d0f6443e59a34d91a43b6b726d63ba286da401677860802cb742e502bf5960ee48e2c2faebfb7456177d84988abae08f0b0
- SSDEEP 12288:hwKfOVRo9yRYjSrwzYDteYIpREr0RwNaSCDXVIm7EiEb:hxWVeyRYOrwzYDteYIp6arEb
- TLSH T1AB659416B7E88155F5B36F309DB582A4EB36BC626E35CA4F3244374E6E71B808D21732
- MD5 SHA1 SHA512 SSDEEP TLSH
Score6/10-
Adds Run key to start application
-
Checks installed software on the system
Looks up Uninstall key entries in the registry to enumerate software on the system.
-
Drops file in System32 directory