General
- Target 2026-07-11_504eb18cc769199dfd652df5cf8d57ec_elex_glassworm_remcos_smoke-loader_stealc_stop_tofsee
- Size 2.5MB
- Sample260711-tzaf5ae14l
- SHA256 42eaf4fc304a1f1685dc4c6863ddd8d33c38a7bea14950c292d82334b207e705
- MD5 504eb18cc769199dfd652df5cf8d57ec
- SHA1 c6d383cb834a61d2d5dec7a112911a2ee686a9a7
- SHA512 db18e9da630e3c89fc47800345ea6af2b2a4c7b4bb3ef571e64cd0297403569fdf81b8c646d8d3d32fa2c782cc50e057f48d096040959999cc32aeb71ed5c92b
- SSDEEP 49152:K8Yk4O8b8ITDnlAxbsSR7Xgo4TiRPnLWvJQ:vj5R7Xn4TiRCvJQ
- TLSH T146C57B23B2D08017E4A7EF30497A8A74EA377C5D6AE0865E32483B4D5F717A0FD25726
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
6/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-07-11_504eb18cc769199dfd652df5cf8d57ec_elex_glassworm_remcos_smoke-loader_stealc_stop_tofsee.exe
Resource
win10v2004-20260513-en
8 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-07-11_504eb18cc769199dfd652df5cf8d57ec_elex_glassworm_remcos_smoke-loader_stealc_stop_tofsee.exe
Resource
win11ltsc2024-20260709-en
8 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-07-11_504eb18cc769199dfd652df5cf8d57ec_elex_glassworm_remcos_smoke-loader_stealc_stop_tofsee
- Size 2.5MB
- SHA256 42eaf4fc304a1f1685dc4c6863ddd8d33c38a7bea14950c292d82334b207e705
- MD5 504eb18cc769199dfd652df5cf8d57ec
- SHA1 c6d383cb834a61d2d5dec7a112911a2ee686a9a7
- SHA512 db18e9da630e3c89fc47800345ea6af2b2a4c7b4bb3ef571e64cd0297403569fdf81b8c646d8d3d32fa2c782cc50e057f48d096040959999cc32aeb71ed5c92b
- SSDEEP 49152:K8Yk4O8b8ITDnlAxbsSR7Xgo4TiRPnLWvJQ:vj5R7Xn4TiRCvJQ
- TLSH T146C57B23B2D08017E4A7EF30497A8A74EA377C5D6AE0865E32483B4D5F717A0FD25726
- MD5 SHA1 SHA512 SSDEEP TLSH
Score6/10-
Adds Run key to start application
-
Checks installed software on the system
Looks up Uninstall key entries in the registry to enumerate software on the system.
-
Drops file in System32 directory