General
- Target 2026-07-10_db5142ec236a2f68a153d8d0a173ac68_elex_glassworm_remcos_smoke-loader_stealc_stop_tofsee
- Size 1.1MB
- Sample260710-fp5ydsds8n
- SHA256 5650479b84e80c7d00e8581a28cd8d7651a3fab0cdb536ca3dd5cfdea3e9ad0b
- MD5 db5142ec236a2f68a153d8d0a173ac68
- SHA1 52ca7d49ab206b72c41c09da90d5216383200890
- SHA512 7ac4b4becb609d51928eeb5e580ed73dadb6116b3a53b21de37d9b6e3e2abe74eb594e53dc0b0b58d879ac0881c63369a092e150cd82aec35c16631b335262e2
- SSDEEP 24576:UxWVeyRYzz4O8b8ITDnljFspsYJL4YJLLF:U8YH4O8b8ITDnljFspsYF4YFZ
- TLSH T18F452A21B2E48025F4B77B348D768AA43A36BC129E75C64F364C375E6F316B0DE21726
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
6/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-07-10_db5142ec236a2f68a153d8d0a173ac68_elex_glassworm_remcos_smoke-loader_stealc_stop_tofsee.exe
Resource
win10v2004-20260513-en
8 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-07-10_db5142ec236a2f68a153d8d0a173ac68_elex_glassworm_remcos_smoke-loader_stealc_stop_tofsee.exe
Resource
win11ltsc2024-20260709-en
8 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-07-10_db5142ec236a2f68a153d8d0a173ac68_elex_glassworm_remcos_smoke-loader_stealc_stop_tofsee
- Size 1.1MB
- SHA256 5650479b84e80c7d00e8581a28cd8d7651a3fab0cdb536ca3dd5cfdea3e9ad0b
- MD5 db5142ec236a2f68a153d8d0a173ac68
- SHA1 52ca7d49ab206b72c41c09da90d5216383200890
- SHA512 7ac4b4becb609d51928eeb5e580ed73dadb6116b3a53b21de37d9b6e3e2abe74eb594e53dc0b0b58d879ac0881c63369a092e150cd82aec35c16631b335262e2
- SSDEEP 24576:UxWVeyRYzz4O8b8ITDnljFspsYJL4YJLLF:U8YH4O8b8ITDnljFspsYF4YFZ
- TLSH T18F452A21B2E48025F4B77B348D768AA43A36BC129E75C64F364C375E6F316B0DE21726
- MD5 SHA1 SHA512 SSDEEP TLSH
Score6/10-
Adds Run key to start application
-
Checks installed software on the system
Looks up Uninstall key entries in the registry to enumerate software on the system.
-
Drops file in System32 directory