General
- Target 2026-07-12_9fcc561755b2435013d49669f660f653_elex_glassworm_remcos_smoke-loader_stealc_stop_tofsee
- Size 687KB
- Sample260712-typvesds2m
- SHA256 c58e1dfa99c028551e8d63c5af505a01b73b61d67c452417061f975f42e3711b
- MD5 9fcc561755b2435013d49669f660f653
- SHA1 76c9ece7b395a6e42f91ddab29183c7f81d4668b
- SHA512 6f58c1881fb4d3ac4b511c82e13f1a5e1730c0a7c2467962c7539b553059d4e9320210b7e46839acfb53ec85c93b4c92a41338c64e7ea2afc1bf3e3fc98e919d
- SSDEEP 6144:iwynAtMrOVRkidy9yIGWlUivVrQJUEJAifvJLJDtnx4bef:iwKfOVRo9yRYXr0mifvJKif
- TLSH T1ECE43911B6E4D022E9B35F340EBA86B0DA36BC166E34868FB64C374D5F727C1853572A
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
6/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-07-12_9fcc561755b2435013d49669f660f653_elex_glassworm_remcos_smoke-loader_stealc_stop_tofsee.exe
Resource
win10v2004-20260513-en
8 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-07-12_9fcc561755b2435013d49669f660f653_elex_glassworm_remcos_smoke-loader_stealc_stop_tofsee.exe
Resource
win11ltsc2024-20260710-en
8 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-07-12_9fcc561755b2435013d49669f660f653_elex_glassworm_remcos_smoke-loader_stealc_stop_tofsee
- Size 687KB
- SHA256 c58e1dfa99c028551e8d63c5af505a01b73b61d67c452417061f975f42e3711b
- MD5 9fcc561755b2435013d49669f660f653
- SHA1 76c9ece7b395a6e42f91ddab29183c7f81d4668b
- SHA512 6f58c1881fb4d3ac4b511c82e13f1a5e1730c0a7c2467962c7539b553059d4e9320210b7e46839acfb53ec85c93b4c92a41338c64e7ea2afc1bf3e3fc98e919d
- SSDEEP 6144:iwynAtMrOVRkidy9yIGWlUivVrQJUEJAifvJLJDtnx4bef:iwKfOVRo9yRYXr0mifvJKif
- TLSH T1ECE43911B6E4D022E9B35F340EBA86B0DA36BC166E34868FB64C374D5F727C1853572A
- MD5 SHA1 SHA512 SSDEEP TLSH
Score6/10Adds Run key to start application
Checks installed software on the system
Looks up Uninstall key entries in the registry to enumerate software on the system.
Drops file in System32 directory