General
- Target 2026-07-11_f8c34392ea892bcdcf31d9ef9bc163d3_elex_glassworm_remcos_smoke-loader_stealc_stop_tofsee
- Size 1.6MB
- Sample260711-r4yneacy8k
- SHA256 41d5434d0bafd071f355bce081ab5845a17405553b0618df3370baae2f08c2e0
- MD5 f8c34392ea892bcdcf31d9ef9bc163d3
- SHA1 569f2d5215ff34243e4336adf996f8f25e99e15f
- SHA512 1b4ec89b87ae8837f71212b078ea17e8b988d1dcfbd4483f3f4314bc010e5b3378c90d49b6045acbd7a2c41594d2b54933d9ba7d4693646095cd8b1c9524f310
- SSDEEP 12288:rwKfOVRo9yRY5C42X5sUSF14t+0dyiAYaCn7QCzj4IkQAbTqWLsWsb:rxWVeyRY5C4s2hzyA6b
- TLSH T1E375943163F98224F6F77B30AD7A42A50977BC52EE38E24E3244366D5D707A09964B33
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
6/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-07-11_f8c34392ea892bcdcf31d9ef9bc163d3_elex_glassworm_remcos_smoke-loader_stealc_stop_tofsee.exe
Resource
win10v2004-20260513-en
8 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-07-11_f8c34392ea892bcdcf31d9ef9bc163d3_elex_glassworm_remcos_smoke-loader_stealc_stop_tofsee.exe
Resource
win11ltsc2024-20260709-en
8 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-07-11_f8c34392ea892bcdcf31d9ef9bc163d3_elex_glassworm_remcos_smoke-loader_stealc_stop_tofsee
- Size 1.6MB
- SHA256 41d5434d0bafd071f355bce081ab5845a17405553b0618df3370baae2f08c2e0
- MD5 f8c34392ea892bcdcf31d9ef9bc163d3
- SHA1 569f2d5215ff34243e4336adf996f8f25e99e15f
- SHA512 1b4ec89b87ae8837f71212b078ea17e8b988d1dcfbd4483f3f4314bc010e5b3378c90d49b6045acbd7a2c41594d2b54933d9ba7d4693646095cd8b1c9524f310
- SSDEEP 12288:rwKfOVRo9yRY5C42X5sUSF14t+0dyiAYaCn7QCzj4IkQAbTqWLsWsb:rxWVeyRY5C4s2hzyA6b
- TLSH T1E375943163F98224F6F77B30AD7A42A50977BC52EE38E24E3244366D5D707A09964B33
- MD5 SHA1 SHA512 SSDEEP TLSH
Score6/10-
Adds Run key to start application
-
Checks installed software on the system
Looks up Uninstall key entries in the registry to enumerate software on the system.
-
Drops file in System32 directory