General
- Target 2026-07-07_0799cb51832dc5ca2a52cf22ca26bdb6_coinminer_elex_glassworm_remcos_smoke-loader_stealc_stop_tofsee
- Size 2.4MB
- Sample260707-t4ftpsaw4p
- SHA256 931bdaa8cdf05abeca7754349c590cdb3f816faec27f515496abcbd0454c9480
- MD5 0799cb51832dc5ca2a52cf22ca26bdb6
- SHA1 209a1104c7ddda47ce4d19552006410273d36525
- SHA512 7f5b78a0dc19e89e1362a71136e2394adbb8385b3f321d98bcf8e457530853e0e51f1f8b06028f857b7da90d16e13fa1fba8625e7dfb52f749c76373e35e3274
- SSDEEP 49152:v8Yg4O8b8ITDnlz9KzsobQrhRR+mibhv0DmT6I6DkL:UGesobQrhj9JI/L
- TLSH T190C5AE33B2E08013E5B2F73449B689B06A36BC9D5AB4C74F7289730D6F716A0DD61726
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
8/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-07-07_0799cb51832dc5ca2a52cf22ca26bdb6_coinminer_elex_glassworm_remcos_smoke-loader_stealc_stop_tofsee.exe
Resource
win10v2004-20260513-en
9 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-07-07_0799cb51832dc5ca2a52cf22ca26bdb6_coinminer_elex_glassworm_remcos_smoke-loader_stealc_stop_tofsee.exe
Resource
win11ltsc2024-20260706-en
7 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-07-07_0799cb51832dc5ca2a52cf22ca26bdb6_coinminer_elex_glassworm_remcos_smoke-loader_stealc_stop_tofsee
- Size 2.4MB
- SHA256 931bdaa8cdf05abeca7754349c590cdb3f816faec27f515496abcbd0454c9480
- MD5 0799cb51832dc5ca2a52cf22ca26bdb6
- SHA1 209a1104c7ddda47ce4d19552006410273d36525
- SHA512 7f5b78a0dc19e89e1362a71136e2394adbb8385b3f321d98bcf8e457530853e0e51f1f8b06028f857b7da90d16e13fa1fba8625e7dfb52f749c76373e35e3274
- SSDEEP 49152:v8Yg4O8b8ITDnlz9KzsobQrhRR+mibhv0DmT6I6DkL:UGesobQrhj9JI/L
- TLSH T190C5AE33B2E08013E5B2F73449B689B06A36BC9D5AB4C74F7289730D6F716A0DD61726
- MD5 SHA1 SHA512 SSDEEP TLSH
Score8/10-
Drops file in Drivers directory
-
Adds Run key to start application
-
Checks installed software on the system
Looks up Uninstall key entries in the registry to enumerate software on the system.
-
Drops file in System32 directory