General
- Target 2026-07-07_cd1371819664858ddd50436ca045f321_elex_glassworm_remcos_smoke-loader_stealc_stop_tofsee
- Size 3.5MB
- Sample260707-s12fkahs7p
- SHA256 cd72d801c4ad39555824ede1f36a796ac7125fd0417fe1aad44b9baadf0722a1
- MD5 cd1371819664858ddd50436ca045f321
- SHA1 686d60156433110be8e6731f3f13f60cd896395d
- SHA512 dc6bd9891c8cef96b2b7c73bc3ecc28e4e7ef2551c877eee21eb84c06cd195bba68aee8555491d9b09bda2f48c8d488be4fc7809b8569adeb86943b9e3a899ba
- SSDEEP 49152:r8Yz3jTaMtiA9fIa9erMIpThIlyolHyHtbSX18lO:Is5tMa9/uhIYolSHtbK1Z
- TLSH T1DF064BC7A3814460C93F4A3159215A6C06123DE69DE8577F2E3E7DEE5A73162CC32A8F
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
6/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-07-07_cd1371819664858ddd50436ca045f321_elex_glassworm_remcos_smoke-loader_stealc_stop_tofsee.exe
Resource
win10v2004-20260513-en
8 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-07-07_cd1371819664858ddd50436ca045f321_elex_glassworm_remcos_smoke-loader_stealc_stop_tofsee.exe
Resource
win11ltsc2024-20260706-en
7 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-07-07_cd1371819664858ddd50436ca045f321_elex_glassworm_remcos_smoke-loader_stealc_stop_tofsee
- Size 3.5MB
- SHA256 cd72d801c4ad39555824ede1f36a796ac7125fd0417fe1aad44b9baadf0722a1
- MD5 cd1371819664858ddd50436ca045f321
- SHA1 686d60156433110be8e6731f3f13f60cd896395d
- SHA512 dc6bd9891c8cef96b2b7c73bc3ecc28e4e7ef2551c877eee21eb84c06cd195bba68aee8555491d9b09bda2f48c8d488be4fc7809b8569adeb86943b9e3a899ba
- SSDEEP 49152:r8Yz3jTaMtiA9fIa9erMIpThIlyolHyHtbSX18lO:Is5tMa9/uhIYolSHtbK1Z
- TLSH T1DF064BC7A3814460C93F4A3159215A6C06123DE69DE8577F2E3E7DEE5A73162CC32A8F
- MD5 SHA1 SHA512 SSDEEP TLSH
Score6/10-
Adds Run key to start application
-
Checks installed software on the system
Looks up Uninstall key entries in the registry to enumerate software on the system.
-
Drops file in System32 directory