General
- Target 2026-07-09_74860134163be4dcb8a87f4e16ba418b_elex_glassworm_remcos_smoke-loader_stealc_stop_tofsee
- Size 2.5MB
- Sample260709-vp4snae151
- SHA256 de15a281b2e693a1baef09a9a70a112fa5dba350d2ec892a0aa6d146def0e630
- MD5 74860134163be4dcb8a87f4e16ba418b
- SHA1 271b07f2f747f5964e2a7ca673f0c5ef79dc29c1
- SHA512 fc9abb09e7e7bd1d09acd2d743479fba6f425e3edfc61d14f27935dae4e1b73b6d65d418cc6e306f265b8fdb11269a34ac28e99a2c51133ca341a28f1d45ac4d
- SSDEEP 12288:UwKfOVRo9yRYycLP42X5sUSF14tDCI0rvAY8bk8Qhzj4IkQWbTqWLsW2Ve:UxWVeyRYycD4s2hzs824e
- TLSH T1D4C53F21A2E4C134F1B76A30D87582F92567BC56EA379D0F2144BD9D7FB079089A0B3E
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
6/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-07-09_74860134163be4dcb8a87f4e16ba418b_elex_glassworm_remcos_smoke-loader_stealc_stop_tofsee.exe
Resource
win10v2004-20260513-en
8 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-07-09_74860134163be4dcb8a87f4e16ba418b_elex_glassworm_remcos_smoke-loader_stealc_stop_tofsee.exe
Resource
win11ltsc2024-20260709-en
8 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-07-09_74860134163be4dcb8a87f4e16ba418b_elex_glassworm_remcos_smoke-loader_stealc_stop_tofsee
- Size 2.5MB
- SHA256 de15a281b2e693a1baef09a9a70a112fa5dba350d2ec892a0aa6d146def0e630
- MD5 74860134163be4dcb8a87f4e16ba418b
- SHA1 271b07f2f747f5964e2a7ca673f0c5ef79dc29c1
- SHA512 fc9abb09e7e7bd1d09acd2d743479fba6f425e3edfc61d14f27935dae4e1b73b6d65d418cc6e306f265b8fdb11269a34ac28e99a2c51133ca341a28f1d45ac4d
- SSDEEP 12288:UwKfOVRo9yRYycLP42X5sUSF14tDCI0rvAY8bk8Qhzj4IkQWbTqWLsW2Ve:UxWVeyRYycD4s2hzs824e
- TLSH T1D4C53F21A2E4C134F1B76A30D87582F92567BC56EA379D0F2144BD9D7FB079089A0B3E
- MD5 SHA1 SHA512 SSDEEP TLSH
Score6/10-
Adds Run key to start application
-
Checks installed software on the system
Looks up Uninstall key entries in the registry to enumerate software on the system.
-
Drops file in System32 directory