General
- Target 2026-07-13_f6cc838f60e78e3de143027d453a9380_elex_glassworm_remcos_smoke-loader_stealc_stop_tofsee
- Size 1.1MB
- Sample260714-an6weabs6p
- SHA256 f3977df57a6a77ed549176075c4c6e3c4fb708751091ca05604cb4e0c1b0debb
- MD5 f6cc838f60e78e3de143027d453a9380
- SHA1 f76d260c9b7c624185bb6e0a33eee1f1fda6c5a4
- SHA512 95c1508d373a7fc77f0d38eda7c301a4339410177963c6b1eecec55b3478d8841071cb7d0dd4f6f2baa5017c7aa009de1acda889cd7c6d18d80a0bc30786fae6
- SSDEEP 12288:mwKfOVRo9yRYsLmu4O8b8ITDnlW0QU4NaSEUFhwXVu9fp:mxWVeyRYsLmu4O8b8ITDnlkQUrwMfp
- TLSH T13E354A36F6D4C021D6A67E304DAB8EA0F635BC456EE4868B325C3B4E6F713A1DC25316
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
6/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-07-13_f6cc838f60e78e3de143027d453a9380_elex_glassworm_remcos_smoke-loader_stealc_stop_tofsee.exe
Resource
win10v2004-20260513-en
8 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-07-13_f6cc838f60e78e3de143027d453a9380_elex_glassworm_remcos_smoke-loader_stealc_stop_tofsee.exe
Resource
win11ltsc2024-20260709-en
8 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-07-13_f6cc838f60e78e3de143027d453a9380_elex_glassworm_remcos_smoke-loader_stealc_stop_tofsee
- Size 1.1MB
- SHA256 f3977df57a6a77ed549176075c4c6e3c4fb708751091ca05604cb4e0c1b0debb
- MD5 f6cc838f60e78e3de143027d453a9380
- SHA1 f76d260c9b7c624185bb6e0a33eee1f1fda6c5a4
- SHA512 95c1508d373a7fc77f0d38eda7c301a4339410177963c6b1eecec55b3478d8841071cb7d0dd4f6f2baa5017c7aa009de1acda889cd7c6d18d80a0bc30786fae6
- SSDEEP 12288:mwKfOVRo9yRYsLmu4O8b8ITDnlW0QU4NaSEUFhwXVu9fp:mxWVeyRYsLmu4O8b8ITDnlkQUrwMfp
- TLSH T13E354A36F6D4C021D6A67E304DAB8EA0F635BC456EE4868B325C3B4E6F713A1DC25316
- MD5 SHA1 SHA512 SSDEEP TLSH
Score6/10-
Adds Run key to start application
-
Checks installed software on the system
Looks up Uninstall key entries in the registry to enumerate software on the system.
-
Drops file in System32 directory