General
- Target 2026-07-11_3a00c21bbef5f0af5b5479c2fbad4314_elex_glassworm_remcos_smoke-loader_stealc_stop_tofsee
- Size 1.3MB
- Sample260711-xe1dlabt3v
- SHA256 1a4d75cc36e0dbc66e03b03dc141d2880e987cb505ba0ff838a0b6e29135aa20
- MD5 3a00c21bbef5f0af5b5479c2fbad4314
- SHA1 49cc6f7104686a998a81ec95ec0fd119788f7cfa
- SHA512 66c8a430e641f869208520dd61c5355206f11d03ab21dcd37f836f1b58c45da30c30fffee32f42a75b358382b6de95a4934df460caa656cb08fb762aef43e4b7
- SSDEEP 12288:PwKfOVRo9yRYlv42X5sUSF14tp4O8b8ITDnlZRPiwAYpGdM1++Q:PxWVeyRYlv4s2hzy4O8b8ITDnlZzpu+Q
- TLSH T16F55D42066E4CE11F2FB763088754A202927BC515EF887CE334ABF5A7BB16A4CD65713
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
6/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-07-11_3a00c21bbef5f0af5b5479c2fbad4314_elex_glassworm_remcos_smoke-loader_stealc_stop_tofsee.exe
Resource
win10v2004-20260513-en
8 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-07-11_3a00c21bbef5f0af5b5479c2fbad4314_elex_glassworm_remcos_smoke-loader_stealc_stop_tofsee.exe
Resource
win11ltsc2024-20260709-en
8 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-07-11_3a00c21bbef5f0af5b5479c2fbad4314_elex_glassworm_remcos_smoke-loader_stealc_stop_tofsee
- Size 1.3MB
- SHA256 1a4d75cc36e0dbc66e03b03dc141d2880e987cb505ba0ff838a0b6e29135aa20
- MD5 3a00c21bbef5f0af5b5479c2fbad4314
- SHA1 49cc6f7104686a998a81ec95ec0fd119788f7cfa
- SHA512 66c8a430e641f869208520dd61c5355206f11d03ab21dcd37f836f1b58c45da30c30fffee32f42a75b358382b6de95a4934df460caa656cb08fb762aef43e4b7
- SSDEEP 12288:PwKfOVRo9yRYlv42X5sUSF14tp4O8b8ITDnlZRPiwAYpGdM1++Q:PxWVeyRYlv4s2hzy4O8b8ITDnlZzpu+Q
- TLSH T16F55D42066E4CE11F2FB763088754A202927BC515EF887CE334ABF5A7BB16A4CD65713
- MD5 SHA1 SHA512 SSDEEP TLSH
Score6/10-
Adds Run key to start application
-
Checks installed software on the system
Looks up Uninstall key entries in the registry to enumerate software on the system.
-
Drops file in System32 directory