General
- Target 2026-07-10_9e7d263131f77d12bcafee8763ac848b_elex_glassworm_remcos_smoke-loader_stealc_stop_tofsee
- Size 1.6MB
- Sample260710-16q6sact8k
- SHA256 3dd77586af899124e2d051e6da8b981fbb17e5da460a0f62e50414d0cb1c22e6
- MD5 9e7d263131f77d12bcafee8763ac848b
- SHA1 caf51e2acdfe4e504359d04baaf9c9713a3be153
- SHA512 2a3673a992fe2d4b317bb6e7bf3d7362427c69020d0c210b570d8c99a5353a91c62b31fb66b146c4c5bd2a4b7f7e8772c556eac08120edd3aa4cb5c9a13dbd6f
- SSDEEP 12288:swKfOVRo9yRYa4O8b8ITDnlYb0/i3GokaR:sxWVeyRYa4O8b8ITDnl3i3pR
- TLSH T1A285932177E4D115F2F33B309DB54AA42A267C116EB9C64F3645B74F2FB1A60CE22722
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
6/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-07-10_9e7d263131f77d12bcafee8763ac848b_elex_glassworm_remcos_smoke-loader_stealc_stop_tofsee.exe
Resource
win10v2004-20260513-en
8 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-07-10_9e7d263131f77d12bcafee8763ac848b_elex_glassworm_remcos_smoke-loader_stealc_stop_tofsee.exe
Resource
win11ltsc2024-20260709-en
8 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-07-10_9e7d263131f77d12bcafee8763ac848b_elex_glassworm_remcos_smoke-loader_stealc_stop_tofsee
- Size 1.6MB
- SHA256 3dd77586af899124e2d051e6da8b981fbb17e5da460a0f62e50414d0cb1c22e6
- MD5 9e7d263131f77d12bcafee8763ac848b
- SHA1 caf51e2acdfe4e504359d04baaf9c9713a3be153
- SHA512 2a3673a992fe2d4b317bb6e7bf3d7362427c69020d0c210b570d8c99a5353a91c62b31fb66b146c4c5bd2a4b7f7e8772c556eac08120edd3aa4cb5c9a13dbd6f
- SSDEEP 12288:swKfOVRo9yRYa4O8b8ITDnlYb0/i3GokaR:sxWVeyRYa4O8b8ITDnl3i3pR
- TLSH T1A285932177E4D115F2F33B309DB54AA42A267C116EB9C64F3645B74F2FB1A60CE22722
- MD5 SHA1 SHA512 SSDEEP TLSH
Score6/10-
Adds Run key to start application
-
Checks installed software on the system
Looks up Uninstall key entries in the registry to enumerate software on the system.
-
Drops file in System32 directory