General
- Target 2026-07-13_8ce7f52a83671c528fcd79b5d3372d8c_elex_glassworm_remcos_smoke-loader_stealc_stop_tofsee
- Size 1014KB
- Sample260714-bc6a6sby3m
- SHA256 db86f9bd0881366ccaa3a2722a08b870e6e90bbbe3c50eac19f0103c234025e8
- MD5 8ce7f52a83671c528fcd79b5d3372d8c
- SHA1 408c015f1b1ced3213fa105f1c527d390045d2c9
- SHA512 4eff31f81f3b7f9c1c173592e823a3c3c43aaebbb55db621d4f20e55c8ff8cd0bd82ff07a724c8f9776028ce64281a36f5141ff1d314ecf4782d3f547ff48a58
- SSDEEP 12288:ewKfOVRo9yRYmv42X5sUSF14tA4O8b8ITDnl3DPERM14zo:exWVeyRYmv4s2hzT4O8b8ITDnl3Gzo
- TLSH T13725E725A2F48E20E2FBBA30497549202527BC16DDF197CA7285BF1E7F31AA1CD60717
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
6/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-07-13_8ce7f52a83671c528fcd79b5d3372d8c_elex_glassworm_remcos_smoke-loader_stealc_stop_tofsee.exe
Resource
win10v2004-20260513-en
8 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-07-13_8ce7f52a83671c528fcd79b5d3372d8c_elex_glassworm_remcos_smoke-loader_stealc_stop_tofsee.exe
Resource
win11ltsc2024-20260710-en
8 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-07-13_8ce7f52a83671c528fcd79b5d3372d8c_elex_glassworm_remcos_smoke-loader_stealc_stop_tofsee
- Size 1014KB
- SHA256 db86f9bd0881366ccaa3a2722a08b870e6e90bbbe3c50eac19f0103c234025e8
- MD5 8ce7f52a83671c528fcd79b5d3372d8c
- SHA1 408c015f1b1ced3213fa105f1c527d390045d2c9
- SHA512 4eff31f81f3b7f9c1c173592e823a3c3c43aaebbb55db621d4f20e55c8ff8cd0bd82ff07a724c8f9776028ce64281a36f5141ff1d314ecf4782d3f547ff48a58
- SSDEEP 12288:ewKfOVRo9yRYmv42X5sUSF14tA4O8b8ITDnl3DPERM14zo:exWVeyRYmv4s2hzT4O8b8ITDnl3Gzo
- TLSH T13725E725A2F48E20E2FBBA30497549202527BC16DDF197CA7285BF1E7F31AA1CD60717
- MD5 SHA1 SHA512 SSDEEP TLSH
Score6/10-
Adds Run key to start application
-
Checks installed software on the system
Looks up Uninstall key entries in the registry to enumerate software on the system.
-
Drops file in System32 directory