General
- Target 2026-07-10_7676d9ee4a5463b54a53a52bf760dd88_elex_glassworm_remcos_smoke-loader_stealc_stop_tofsee
- Size 3.2MB
- Sample260710-2fnteafv81
- SHA256 a7b565f5e31b736a7ad067d507eec4b7aba1cb400b843152c00b21c81ce7e779
- MD5 7676d9ee4a5463b54a53a52bf760dd88
- SHA1 ae42877c7049757be8225090f495c0120b3f9a94
- SHA512 9f178a4ebf7a01ac65784bb05ab9394e3bc66f4f40e0e42a18804c77ef4915507367d4deff6d91fba4b303ba587ceae8d79c0c07a7b9801ae732ee111cf30edc
- SSDEEP 49152:A8YtzuzntVx8MP8IzsobQrhRR+mibhv0DmT6I6DkD:hazU5cMsobQrhj9JILD
- TLSH T1D6F56A03B6E48513F1F3DF3059B5A9765A29BC9E5A3582CF728C710E5F71A80DA31B22
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
6/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-07-10_7676d9ee4a5463b54a53a52bf760dd88_elex_glassworm_remcos_smoke-loader_stealc_stop_tofsee.exe
Resource
win10v2004-20260513-en
8 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-07-10_7676d9ee4a5463b54a53a52bf760dd88_elex_glassworm_remcos_smoke-loader_stealc_stop_tofsee.exe
Resource
win11ltsc2024-20260709-en
8 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-07-10_7676d9ee4a5463b54a53a52bf760dd88_elex_glassworm_remcos_smoke-loader_stealc_stop_tofsee
- Size 3.2MB
- SHA256 a7b565f5e31b736a7ad067d507eec4b7aba1cb400b843152c00b21c81ce7e779
- MD5 7676d9ee4a5463b54a53a52bf760dd88
- SHA1 ae42877c7049757be8225090f495c0120b3f9a94
- SHA512 9f178a4ebf7a01ac65784bb05ab9394e3bc66f4f40e0e42a18804c77ef4915507367d4deff6d91fba4b303ba587ceae8d79c0c07a7b9801ae732ee111cf30edc
- SSDEEP 49152:A8YtzuzntVx8MP8IzsobQrhRR+mibhv0DmT6I6DkD:hazU5cMsobQrhj9JILD
- TLSH T1D6F56A03B6E48513F1F3DF3059B5A9765A29BC9E5A3582CF728C710E5F71A80DA31B22
- MD5 SHA1 SHA512 SSDEEP TLSH
Score6/10-
Adds Run key to start application
-
Checks installed software on the system
Looks up Uninstall key entries in the registry to enumerate software on the system.
-
Drops file in System32 directory