General
- Target 2026-07-12_9fcc561755b2435013d49669f660f653_elex_glassworm_remcos_smoke-loader_stealc_stop_tofsee
- Size 687KB
- Sample260712-typvesds2m
- SHA256 c58e1dfa99c028551e8d63c5af505a01b73b61d67c452417061f975f42e3711b
- MD5 9fcc561755b2435013d49669f660f653
- SHA1 76c9ece7b395a6e42f91ddab29183c7f81d4668b
- SHA512 6f58c1881fb4d3ac4b511c82e13f1a5e1730c0a7c2467962c7539b553059d4e9320210b7e46839acfb53ec85c93b4c92a41338c64e7ea2afc1bf3e3fc98e919d
- SSDEEP 6144:iwynAtMrOVRkidy9yIGWlUivVrQJUEJAifvJLJDtnx4bef:iwKfOVRo9yRYXr0mifvJKif
- TLSH T1ECE43911B6E4D022E9B35F340EBA86B0DA36BC166E34868FB64C374D5F727C1853572A
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
6/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-07-12_9fcc561755b2435013d49669f660f653_elex_glassworm_remcos_smoke-loader_stealc_stop_tofsee.exe
Resource
win10v2004-20260513-en
8 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-07-12_9fcc561755b2435013d49669f660f653_elex_glassworm_remcos_smoke-loader_stealc_stop_tofsee.exe
Resource
win11ltsc2024-20260710-en
8 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-07-12_9fcc561755b2435013d49669f660f653_elex_glassworm_remcos_smoke-loader_stealc_stop_tofsee
- Size 687KB
- SHA256 c58e1dfa99c028551e8d63c5af505a01b73b61d67c452417061f975f42e3711b
- MD5 9fcc561755b2435013d49669f660f653
- SHA1 76c9ece7b395a6e42f91ddab29183c7f81d4668b
- SHA512 6f58c1881fb4d3ac4b511c82e13f1a5e1730c0a7c2467962c7539b553059d4e9320210b7e46839acfb53ec85c93b4c92a41338c64e7ea2afc1bf3e3fc98e919d
- SSDEEP 6144:iwynAtMrOVRkidy9yIGWlUivVrQJUEJAifvJLJDtnx4bef:iwKfOVRo9yRYXr0mifvJKif
- TLSH T1ECE43911B6E4D022E9B35F340EBA86B0DA36BC166E34868FB64C374D5F727C1853572A
- MD5 SHA1 SHA512 SSDEEP TLSH
Score6/10-
Adds Run key to start application
-
Checks installed software on the system
Looks up Uninstall key entries in the registry to enumerate software on the system.
-
Drops file in System32 directory