General
- Target 2026-07-06_cfbcf30ea3d234789cfc9a4ce31f6762_elex_glassworm_remcos_smoke-loader_stealc_stop_tofsee
- Size 1.4MB
- Sample260706-v7ml4aat6y
- SHA256 9f370c5016a13a009a54a1ca7bed7fe7644dc8267d601c9c18885c296de25d0d
- MD5 cfbcf30ea3d234789cfc9a4ce31f6762
- SHA1 e165974984c049c3527d292ab635c8541688c548
- SHA512 9ede5b80e33740c6ab34b74e4ee83d8150e3d9551a9284c2f6f4ba6a7c79ab353d863a9195950298bd6f734c6975cac71ddb1de73063fb95c2e06a5631f5c48c
- SSDEEP 12288:pwKfOVRo9yRYXS8wzYDteYIpREr0RwNaSCDXVIm7EiET:pxWVeyRYi8wzYDteYIp6arET
- TLSH T108659416B7E88155F5B36F309DB582A4EB36BC626E35CA4F3244374E6E71B808D21732
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
6/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-07-06_cfbcf30ea3d234789cfc9a4ce31f6762_elex_glassworm_remcos_smoke-loader_stealc_stop_tofsee.exe
Resource
win10v2004-20260513-en
8 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-07-06_cfbcf30ea3d234789cfc9a4ce31f6762_elex_glassworm_remcos_smoke-loader_stealc_stop_tofsee.exe
Resource
win11ltsc2024-20260629-en
8 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-07-06_cfbcf30ea3d234789cfc9a4ce31f6762_elex_glassworm_remcos_smoke-loader_stealc_stop_tofsee
- Size 1.4MB
- SHA256 9f370c5016a13a009a54a1ca7bed7fe7644dc8267d601c9c18885c296de25d0d
- MD5 cfbcf30ea3d234789cfc9a4ce31f6762
- SHA1 e165974984c049c3527d292ab635c8541688c548
- SHA512 9ede5b80e33740c6ab34b74e4ee83d8150e3d9551a9284c2f6f4ba6a7c79ab353d863a9195950298bd6f734c6975cac71ddb1de73063fb95c2e06a5631f5c48c
- SSDEEP 12288:pwKfOVRo9yRYXS8wzYDteYIpREr0RwNaSCDXVIm7EiET:pxWVeyRYi8wzYDteYIp6arET
- TLSH T108659416B7E88155F5B36F309DB582A4EB36BC626E35CA4F3244374E6E71B808D21732
- MD5 SHA1 SHA512 SSDEEP TLSH
Score6/10-
Adds Run key to start application
-
Checks installed software on the system
Looks up Uninstall key entries in the registry to enumerate software on the system.
-
Drops file in System32 directory