General
- Target 2026-07-13_96ee66d76dc78084392108cf344b8ac4_elex_glassworm_remcos_smoke-loader_stealc_stop_tofsee
- Size 1.3MB
- Sample260714-bamfaabx6r
- SHA256 67f5cfb795e250fef4d6421056f14aa75923f8ca57063016dd43aa49589314ca
- MD5 96ee66d76dc78084392108cf344b8ac4
- SHA1 49fa9af378cb0478ce86080ad4cf5cd646ad1d53
- SHA512 24b8c706ecaa2f505892642b932b60ecc7123ac38f931972e3d6113d45994988be084feaf1911c15db737435942d253539e65682c18d7b7b70bec4b4ebabf0ac
- SSDEEP 12288:LwKfOVRo9yRYgv42X5sUSF14tp4O8b8ITDnlZRPiwAYpGdM1+Jt:LxWVeyRYgv4s2hzy4O8b8ITDnlZzpuJt
- TLSH T18755D52066E4CE11F2FB763088754A202927BC515EF887CE334ABF5A7BB16A4CD65713
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
6/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-07-13_96ee66d76dc78084392108cf344b8ac4_elex_glassworm_remcos_smoke-loader_stealc_stop_tofsee.exe
Resource
win10v2004-20260513-en
8 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-07-13_96ee66d76dc78084392108cf344b8ac4_elex_glassworm_remcos_smoke-loader_stealc_stop_tofsee.exe
Resource
win11ltsc2024-20260710-en
8 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-07-13_96ee66d76dc78084392108cf344b8ac4_elex_glassworm_remcos_smoke-loader_stealc_stop_tofsee
- Size 1.3MB
- SHA256 67f5cfb795e250fef4d6421056f14aa75923f8ca57063016dd43aa49589314ca
- MD5 96ee66d76dc78084392108cf344b8ac4
- SHA1 49fa9af378cb0478ce86080ad4cf5cd646ad1d53
- SHA512 24b8c706ecaa2f505892642b932b60ecc7123ac38f931972e3d6113d45994988be084feaf1911c15db737435942d253539e65682c18d7b7b70bec4b4ebabf0ac
- SSDEEP 12288:LwKfOVRo9yRYgv42X5sUSF14tp4O8b8ITDnlZRPiwAYpGdM1+Jt:LxWVeyRYgv4s2hzy4O8b8ITDnlZzpuJt
- TLSH T18755D52066E4CE11F2FB763088754A202927BC515EF887CE334ABF5A7BB16A4CD65713
- MD5 SHA1 SHA512 SSDEEP TLSH
Score6/10-
Adds Run key to start application
-
Checks installed software on the system
Looks up Uninstall key entries in the registry to enumerate software on the system.
-
Drops file in System32 directory