General
- Target 2026-07-09_eb63cfbbde80a72567f375f4d78d5f8b_elex_glassworm_remcos_smoke-loader_stealc_stop_tofsee
- Size 2.5MB
- Sample260709-tm21lsds2r
- SHA256 8ba585f68f83133c006d4fc05f1a525578119e6f94b3fcb48c9171d5ad7569bc
- MD5 eb63cfbbde80a72567f375f4d78d5f8b
- SHA1 7ab3ad45bb2411e7eb6e7dc3e6adca10c18f914c
- SHA512 794f64f08eab2399ccf5393035eb50233180fbde1bca15aef3c0964891db6e7b261cf490a93763ae6009d98857454bf4e48ee329f008555fa6d871ec4136c2a5
- SSDEEP 12288:EwKfOVRo9yRYyLQ42X5sUSF14tDCI0rvAY8bk8Qhzj4IkQWbTqWLsW2Vd:ExWVeyRYyLQ4s2hzs824d
- TLSH T1E3C53F21A2E4C134F1B76A30D87582F92567BC56EA379D0F2144BD9D7FB079089A0B3E
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
6/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-07-09_eb63cfbbde80a72567f375f4d78d5f8b_elex_glassworm_remcos_smoke-loader_stealc_stop_tofsee.exe
Resource
win10v2004-20260513-en
8 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-07-09_eb63cfbbde80a72567f375f4d78d5f8b_elex_glassworm_remcos_smoke-loader_stealc_stop_tofsee.exe
Resource
win11ltsc2024-20260709-en
8 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-07-09_eb63cfbbde80a72567f375f4d78d5f8b_elex_glassworm_remcos_smoke-loader_stealc_stop_tofsee
- Size 2.5MB
- SHA256 8ba585f68f83133c006d4fc05f1a525578119e6f94b3fcb48c9171d5ad7569bc
- MD5 eb63cfbbde80a72567f375f4d78d5f8b
- SHA1 7ab3ad45bb2411e7eb6e7dc3e6adca10c18f914c
- SHA512 794f64f08eab2399ccf5393035eb50233180fbde1bca15aef3c0964891db6e7b261cf490a93763ae6009d98857454bf4e48ee329f008555fa6d871ec4136c2a5
- SSDEEP 12288:EwKfOVRo9yRYyLQ42X5sUSF14tDCI0rvAY8bk8Qhzj4IkQWbTqWLsW2Vd:ExWVeyRYyLQ4s2hzs824d
- TLSH T1E3C53F21A2E4C134F1B76A30D87582F92567BC56EA379D0F2144BD9D7FB079089A0B3E
- MD5 SHA1 SHA512 SSDEEP TLSH
Score6/10-
Adds Run key to start application
-
Checks installed software on the system
Looks up Uninstall key entries in the registry to enumerate software on the system.
-
Drops file in System32 directory