General
- Target 2026-07-10_81d5d7bb750991d8657bfd9b40726b1c_elex_glassworm_remcos_smoke-loader_stealc_stop_tofsee
- Size 1.4MB
- Sample260710-yslyssay4t
- SHA256 a0bdbb49a4cd85599c639182a5b383fd2cffdcaa53bb9a4e0a93dca2671b59ca
- MD5 81d5d7bb750991d8657bfd9b40726b1c
- SHA1 a444e5c92e7975d6058151d76835e447ff9f2edc
- SHA512 1da437291192d6846307c5418952399c5758abf925880f65e34bd163b3ddb656fed7168ff8e7415ab481114a789c63803cd3efb9db9f6badd8912a6dadcb49f0
- SSDEEP 12288:xwKfOVRo9yRYGLmn4O8b8ITDnlP+0/GaxN:xxWVeyRYGLmn4O8b8ITDnlzlN
- TLSH T13F65F722B590C411E6E23E30496A8AA4F535BC016AE84AC7374EFB8F7FF27A1DD15315
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
6/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-07-10_81d5d7bb750991d8657bfd9b40726b1c_elex_glassworm_remcos_smoke-loader_stealc_stop_tofsee.exe
Resource
win10v2004-20260513-en
8 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-07-10_81d5d7bb750991d8657bfd9b40726b1c_elex_glassworm_remcos_smoke-loader_stealc_stop_tofsee.exe
Resource
win11ltsc2024-20260710-en
8 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-07-10_81d5d7bb750991d8657bfd9b40726b1c_elex_glassworm_remcos_smoke-loader_stealc_stop_tofsee
- Size 1.4MB
- SHA256 a0bdbb49a4cd85599c639182a5b383fd2cffdcaa53bb9a4e0a93dca2671b59ca
- MD5 81d5d7bb750991d8657bfd9b40726b1c
- SHA1 a444e5c92e7975d6058151d76835e447ff9f2edc
- SHA512 1da437291192d6846307c5418952399c5758abf925880f65e34bd163b3ddb656fed7168ff8e7415ab481114a789c63803cd3efb9db9f6badd8912a6dadcb49f0
- SSDEEP 12288:xwKfOVRo9yRYGLmn4O8b8ITDnlP+0/GaxN:xxWVeyRYGLmn4O8b8ITDnlzlN
- TLSH T13F65F722B590C411E6E23E30496A8AA4F535BC016AE84AC7374EFB8F7FF27A1DD15315
- MD5 SHA1 SHA512 SSDEEP TLSH
Score6/10-
Adds Run key to start application
-
Checks installed software on the system
Looks up Uninstall key entries in the registry to enumerate software on the system.
-
Drops file in System32 directory