General
- Target 2026-07-06_80c79b1440ca3a0cfc23ceb048312aba_elex_glassworm_remcos_smoke-loader_stealc_stop_tofsee
- Size 1.8MB
- Sample260707-c55qsags9w
- SHA256 e0dcceb9f4c93334f8e72f063483f2df2f0132c07326d68e5850c9aa480cecb5
- MD5 80c79b1440ca3a0cfc23ceb048312aba
- SHA1 0c82bb814786b94945d939e6064c6751a8110245
- SHA512 260c3c1360e90535aa1691cfc7522b9a455a937acbb2a82837575255b5734c7844d9c8f99cf5cc1c5670a8e90915447c06641c9d54320d55e587b0773cd75953
- SSDEEP 24576:nxWVeyRYZhoh4s2hzntVIJqFEFuCxe10FgC:n8YZ2hzuzntVxeFuCx8u
- TLSH T190950603B6E58513F0F2DE3049B6997A1625BD5E5E3682CF764C364EAF31780DA31B22
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
6/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-07-06_80c79b1440ca3a0cfc23ceb048312aba_elex_glassworm_remcos_smoke-loader_stealc_stop_tofsee.exe
Resource
win10v2004-20260513-en
8 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-07-06_80c79b1440ca3a0cfc23ceb048312aba_elex_glassworm_remcos_smoke-loader_stealc_stop_tofsee.exe
Resource
win11ltsc2024-20260706-en
8 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-07-06_80c79b1440ca3a0cfc23ceb048312aba_elex_glassworm_remcos_smoke-loader_stealc_stop_tofsee
- Size 1.8MB
- SHA256 e0dcceb9f4c93334f8e72f063483f2df2f0132c07326d68e5850c9aa480cecb5
- MD5 80c79b1440ca3a0cfc23ceb048312aba
- SHA1 0c82bb814786b94945d939e6064c6751a8110245
- SHA512 260c3c1360e90535aa1691cfc7522b9a455a937acbb2a82837575255b5734c7844d9c8f99cf5cc1c5670a8e90915447c06641c9d54320d55e587b0773cd75953
- SSDEEP 24576:nxWVeyRYZhoh4s2hzntVIJqFEFuCxe10FgC:n8YZ2hzuzntVxeFuCx8u
- TLSH T190950603B6E58513F0F2DE3049B6997A1625BD5E5E3682CF764C364EAF31780DA31B22
- MD5 SHA1 SHA512 SSDEEP TLSH
Score6/10-
Adds Run key to start application
-
Checks installed software on the system
Looks up Uninstall key entries in the registry to enumerate software on the system.
-
Drops file in System32 directory