General
- Target 2026-07-10_9b79afea3ec0d50008116a7dc64594ea_elex_glassworm_remcos_smoke-loader_stealc_stop_tofsee
- Size 1.0MB
- Sample260710-ftstmaew91
- SHA256 0ee9a967ca7dd241333b09d17a582b851051feff8b014dbdedbe343eb58759b4
- MD5 9b79afea3ec0d50008116a7dc64594ea
- SHA1 3b833b4c21e1a57527043dcca3c214817c03f850
- SHA512 e8e26f63f604f61b60171cfb234a5046bcf95eb35327e78c24998445b89f649e0dd2c9b306f99731f18abd07858294f0a5da23579ab865c4e5cd5dbb1c191528
- SSDEEP 12288:FwKfOVRo9yRYY/GLm64O8b8ITDnlr0izA:FxWVeyRYyGLm64O8b8ITDnllA
- TLSH T1B735E922F2D4C010E6B73F30497A8DA0EA36BC516AB4968F725C3B1D5F717A1DD2631A
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
6/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-07-10_9b79afea3ec0d50008116a7dc64594ea_elex_glassworm_remcos_smoke-loader_stealc_stop_tofsee.exe
Resource
win10v2004-20260513-en
8 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-07-10_9b79afea3ec0d50008116a7dc64594ea_elex_glassworm_remcos_smoke-loader_stealc_stop_tofsee.exe
Resource
win11ltsc2024-20260709-en
8 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-07-10_9b79afea3ec0d50008116a7dc64594ea_elex_glassworm_remcos_smoke-loader_stealc_stop_tofsee
- Size 1.0MB
- SHA256 0ee9a967ca7dd241333b09d17a582b851051feff8b014dbdedbe343eb58759b4
- MD5 9b79afea3ec0d50008116a7dc64594ea
- SHA1 3b833b4c21e1a57527043dcca3c214817c03f850
- SHA512 e8e26f63f604f61b60171cfb234a5046bcf95eb35327e78c24998445b89f649e0dd2c9b306f99731f18abd07858294f0a5da23579ab865c4e5cd5dbb1c191528
- SSDEEP 12288:FwKfOVRo9yRYY/GLm64O8b8ITDnlr0izA:FxWVeyRYyGLm64O8b8ITDnllA
- TLSH T1B735E922F2D4C010E6B73F30497A8DA0EA36BC516AB4968F725C3B1D5F717A1DD2631A
- MD5 SHA1 SHA512 SSDEEP TLSH
Score6/10-
Adds Run key to start application
-
Checks installed software on the system
Looks up Uninstall key entries in the registry to enumerate software on the system.
-
Drops file in System32 directory