General
- Target 2026-07-06_a1f6d11be5a0d5af090bd62a81c76db5_elex_glassworm_remcos_smoke-loader_stealc_stop_tofsee
- Size 1.4MB
- Sample260706-wft3jaew2m
- SHA256 cb5e40799332a2867a1f87a9bfab2f3cc243d2f2dc619003f78bc7a224563ef2
- MD5 a1f6d11be5a0d5af090bd62a81c76db5
- SHA1 a7903902667b123cc8605e89fdc8aa99ef03186c
- SHA512 9c5ab8f785f40bf70083928bc2e76e7a205e9974b5e89494269cdfa32b4c9c4b75b93e2618d214f77b35220c5fb3239e51fa8aeafedcc0fcd59a158aefc7d532
- SSDEEP 12288:RwKfOVRo9yRYsSywzYDteYIpREr0RwNaSCDXVIm7EiEM:RxWVeyRYDywzYDteYIp6arEM
- TLSH T108659416B7E88155F5B36F309DB582A4EB36BC626E35CA4F3244374E6E71B808D21732
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
6/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-07-06_a1f6d11be5a0d5af090bd62a81c76db5_elex_glassworm_remcos_smoke-loader_stealc_stop_tofsee.exe
Resource
win10v2004-20260513-en
8 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-07-06_a1f6d11be5a0d5af090bd62a81c76db5_elex_glassworm_remcos_smoke-loader_stealc_stop_tofsee.exe
Resource
win11ltsc2024-20260706-en
8 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-07-06_a1f6d11be5a0d5af090bd62a81c76db5_elex_glassworm_remcos_smoke-loader_stealc_stop_tofsee
- Size 1.4MB
- SHA256 cb5e40799332a2867a1f87a9bfab2f3cc243d2f2dc619003f78bc7a224563ef2
- MD5 a1f6d11be5a0d5af090bd62a81c76db5
- SHA1 a7903902667b123cc8605e89fdc8aa99ef03186c
- SHA512 9c5ab8f785f40bf70083928bc2e76e7a205e9974b5e89494269cdfa32b4c9c4b75b93e2618d214f77b35220c5fb3239e51fa8aeafedcc0fcd59a158aefc7d532
- SSDEEP 12288:RwKfOVRo9yRYsSywzYDteYIpREr0RwNaSCDXVIm7EiEM:RxWVeyRYDywzYDteYIp6arEM
- TLSH T108659416B7E88155F5B36F309DB582A4EB36BC626E35CA4F3244374E6E71B808D21732
- MD5 SHA1 SHA512 SSDEEP TLSH
Score6/10-
Adds Run key to start application
-
Checks installed software on the system
Looks up Uninstall key entries in the registry to enumerate software on the system.
-
Drops file in System32 directory