General
- Target 2026-07-10_e27df0efdb62c1defeccf2bdc6679335_elex_glassworm_remcos_smoke-loader_stealc_stop_tofsee
- Size 1.3MB
- Sample260710-thg5mscw3n
- SHA256 ae9e0dcf5d6296e2b64442f88d56c41247ffcb5a1c4ed6d7375b9a79155c810d
- MD5 e27df0efdb62c1defeccf2bdc6679335
- SHA1 80ed375fd2fb5db106fe8b8c9f2d9aa8a1ce8fda
- SHA512 2c26277a92d716be6449d2975ae19bf48f4c5c0f6931a84954ffe3063f2de37ae5636f753d637d8643ac881e90b75c03c6a8eb23efb3adad4e9eee8f71594e2b
- SSDEEP 24576:nxWVeyRYfv4s2hzQ4O8b8ITDnlJFjObn9:n8Y3zuzQ4O8b8ITDnlJFqb9
- TLSH T14355C42162E4CE11F2FB763088764A6029237C515EF987CA334ABF4E7BB16A4CD61717
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
6/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-07-10_e27df0efdb62c1defeccf2bdc6679335_elex_glassworm_remcos_smoke-loader_stealc_stop_tofsee.exe
Resource
win10v2004-20260513-en
8 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-07-10_e27df0efdb62c1defeccf2bdc6679335_elex_glassworm_remcos_smoke-loader_stealc_stop_tofsee.exe
Resource
win11ltsc2024-20260710-en
8 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-07-10_e27df0efdb62c1defeccf2bdc6679335_elex_glassworm_remcos_smoke-loader_stealc_stop_tofsee
- Size 1.3MB
- SHA256 ae9e0dcf5d6296e2b64442f88d56c41247ffcb5a1c4ed6d7375b9a79155c810d
- MD5 e27df0efdb62c1defeccf2bdc6679335
- SHA1 80ed375fd2fb5db106fe8b8c9f2d9aa8a1ce8fda
- SHA512 2c26277a92d716be6449d2975ae19bf48f4c5c0f6931a84954ffe3063f2de37ae5636f753d637d8643ac881e90b75c03c6a8eb23efb3adad4e9eee8f71594e2b
- SSDEEP 24576:nxWVeyRYfv4s2hzQ4O8b8ITDnlJFjObn9:n8Y3zuzQ4O8b8ITDnlJFqb9
- TLSH T14355C42162E4CE11F2FB763088764A6029237C515EF987CA334ABF4E7BB16A4CD61717
- MD5 SHA1 SHA512 SSDEEP TLSH
Score6/10-
Adds Run key to start application
-
Checks installed software on the system
Looks up Uninstall key entries in the registry to enumerate software on the system.
-
Drops file in System32 directory