General
- Target 2026-07-06_ebdd09f8889007d1ad3b4d6d0c445ef1_elex_glassworm_remcos_smoke-loader_stealc_stop_tofsee
- Size 1.1MB
- Sample260707-af81ssaz5m
- SHA256 800c208af108ba7b2907545e8078ced36289148bca12858bec8e8baa8b2f1287
- MD5 ebdd09f8889007d1ad3b4d6d0c445ef1
- SHA1 4bd4a4ccebee8eeb1f8a2edff8effbc4b1834f46
- SHA512 cec696549a43dd7b560c4673de19b5845228596635e3301284f02d50dded5f9131681c5c5348b41b088499a669bf528f8c5afa507c929cc235a4c46fcd84f0ba
- SSDEEP 12288:fwKfOVRo9yRYeKLmO4O8b8ITDnlW05wNaSCDXVwQfj:fxWVeyRYeKLmO4O8b8ITDnlnXfj
- TLSH T145355B36F6D4C021D6A67E304DAB8EA0F635BC456AE4878B364C3B4E6F713A1DC25316
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
6/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-07-06_ebdd09f8889007d1ad3b4d6d0c445ef1_elex_glassworm_remcos_smoke-loader_stealc_stop_tofsee.exe
Resource
win10v2004-20260513-en
8 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-07-06_ebdd09f8889007d1ad3b4d6d0c445ef1_elex_glassworm_remcos_smoke-loader_stealc_stop_tofsee.exe
Resource
win11ltsc2024-20260706-en
8 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-07-06_ebdd09f8889007d1ad3b4d6d0c445ef1_elex_glassworm_remcos_smoke-loader_stealc_stop_tofsee
- Size 1.1MB
- SHA256 800c208af108ba7b2907545e8078ced36289148bca12858bec8e8baa8b2f1287
- MD5 ebdd09f8889007d1ad3b4d6d0c445ef1
- SHA1 4bd4a4ccebee8eeb1f8a2edff8effbc4b1834f46
- SHA512 cec696549a43dd7b560c4673de19b5845228596635e3301284f02d50dded5f9131681c5c5348b41b088499a669bf528f8c5afa507c929cc235a4c46fcd84f0ba
- SSDEEP 12288:fwKfOVRo9yRYeKLmO4O8b8ITDnlW05wNaSCDXVwQfj:fxWVeyRYeKLmO4O8b8ITDnlnXfj
- TLSH T145355B36F6D4C021D6A67E304DAB8EA0F635BC456AE4878B364C3B4E6F713A1DC25316
- MD5 SHA1 SHA512 SSDEEP TLSH
Score6/10-
Adds Run key to start application
-
Checks installed software on the system
Looks up Uninstall key entries in the registry to enumerate software on the system.
-
Drops file in System32 directory