General
- Target 2026-07-11_82ff0853fc22c6fd52090b580849c4e2_elex_glassworm_remcos_smoke-loader_stealc_stop_tofsee
- Size 1.4MB
- Sample260711-gmlmeacw2k
- SHA256 66417d1a3f6fbe6c83be52e26bb0902753b190a59b63bb1bcc8b593a91e0b3e8
- MD5 82ff0853fc22c6fd52090b580849c4e2
- SHA1 89e2f3e0f5ef5a35cd13d8b140955c95422d8ca9
- SHA512 2c2edbf6cc9589affb7fa3e2f4bd60d0ec90d0e0415ffe683ab7c2abff24c03175e75646cc79cb61e98404e6cd6e2efdcb8111691645cbd07e48e383decd3f69
- SSDEEP 12288:vwKfOVRo9yRY5QLmh4O8b8ITDnl60HiUqm/Vk0O+vrvBkyJS/INxd6r2cVd:vxWVeyRY5QLmh4O8b8ITDnlPlqEkkvId
- TLSH T1C865E463B2D4C027E5B6EF30097A8A70EA37BC5D69B4868E3248374D5F717A0DC25726
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
6/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-07-11_82ff0853fc22c6fd52090b580849c4e2_elex_glassworm_remcos_smoke-loader_stealc_stop_tofsee.exe
Resource
win10v2004-20260513-en
8 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-07-11_82ff0853fc22c6fd52090b580849c4e2_elex_glassworm_remcos_smoke-loader_stealc_stop_tofsee.exe
Resource
win11ltsc2024-20260709-en
8 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-07-11_82ff0853fc22c6fd52090b580849c4e2_elex_glassworm_remcos_smoke-loader_stealc_stop_tofsee
- Size 1.4MB
- SHA256 66417d1a3f6fbe6c83be52e26bb0902753b190a59b63bb1bcc8b593a91e0b3e8
- MD5 82ff0853fc22c6fd52090b580849c4e2
- SHA1 89e2f3e0f5ef5a35cd13d8b140955c95422d8ca9
- SHA512 2c2edbf6cc9589affb7fa3e2f4bd60d0ec90d0e0415ffe683ab7c2abff24c03175e75646cc79cb61e98404e6cd6e2efdcb8111691645cbd07e48e383decd3f69
- SSDEEP 12288:vwKfOVRo9yRY5QLmh4O8b8ITDnl60HiUqm/Vk0O+vrvBkyJS/INxd6r2cVd:vxWVeyRY5QLmh4O8b8ITDnlPlqEkkvId
- TLSH T1C865E463B2D4C027E5B6EF30097A8A70EA37BC5D69B4868E3248374D5F717A0DC25726
- MD5 SHA1 SHA512 SSDEEP TLSH
Score6/10-
Adds Run key to start application
-
Checks installed software on the system
Looks up Uninstall key entries in the registry to enumerate software on the system.
-
Drops file in System32 directory