General
- Target 2026-07-11_a304ecb6e0384eea5b61feae0753d65d_elex_glassworm_remcos_smoke-loader_stealc_stop_tofsee
- Size 1.7MB
- Sample260711-s38bwsd18r
- SHA256 3f99da1ee0774796d5ca2aac0c93e76528a01a5b4dfe37c5ee24c7dc25d8d484
- MD5 a304ecb6e0384eea5b61feae0753d65d
- SHA1 15410f7daf9f651b072b4d8048fcc3778ad8c036
- SHA512 54aad47949390d51b567aee8d503119f9c0f1b4b70205860d8d7e848dadf0da0593a42c0083f6374f8a1eb6fa6fe3bacf2af29849ffa51e0ae7e197b46eaf00a
- SSDEEP 24576:lxWVeyRYov4s2hzT4O8b8ITDnl4GMpg+5:l8YIzuzT4O8b8ITDnl4VpgI
- TLSH T12185A51163E88F15F2FB7B3099B446602A277C519EB9C7CE22457F4E3AB1A50CD62723
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
6/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-07-11_a304ecb6e0384eea5b61feae0753d65d_elex_glassworm_remcos_smoke-loader_stealc_stop_tofsee.exe
Resource
win10v2004-20260513-en
8 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-07-11_a304ecb6e0384eea5b61feae0753d65d_elex_glassworm_remcos_smoke-loader_stealc_stop_tofsee.exe
Resource
win11ltsc2024-20260710-en
8 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-07-11_a304ecb6e0384eea5b61feae0753d65d_elex_glassworm_remcos_smoke-loader_stealc_stop_tofsee
- Size 1.7MB
- SHA256 3f99da1ee0774796d5ca2aac0c93e76528a01a5b4dfe37c5ee24c7dc25d8d484
- MD5 a304ecb6e0384eea5b61feae0753d65d
- SHA1 15410f7daf9f651b072b4d8048fcc3778ad8c036
- SHA512 54aad47949390d51b567aee8d503119f9c0f1b4b70205860d8d7e848dadf0da0593a42c0083f6374f8a1eb6fa6fe3bacf2af29849ffa51e0ae7e197b46eaf00a
- SSDEEP 24576:lxWVeyRYov4s2hzT4O8b8ITDnl4GMpg+5:l8YIzuzT4O8b8ITDnl4VpgI
- TLSH T12185A51163E88F15F2FB7B3099B446602A277C519EB9C7CE22457F4E3AB1A50CD62723
- MD5 SHA1 SHA512 SSDEEP TLSH
Score6/10-
Adds Run key to start application
-
Checks installed software on the system
Looks up Uninstall key entries in the registry to enumerate software on the system.
-
Drops file in System32 directory