General
- Target 2026-07-13_8954b8e851b10862d57dbec26731f846_elex_glassworm_remcos_smoke-loader_stealc_stop_tofsee
- Size 1.4MB
- Sample260714-bd4tqsby6j
- SHA256 4d9a2e41bb2421839fcf852e4d34e93fc1d5b9344aafe78d31ec73c82bf9fb05
- MD5 8954b8e851b10862d57dbec26731f846
- SHA1 fdd846de34a16886a62fb1bc3077c74ebc98961d
- SHA512 dab3798ceb03025a49c35294c44ebf259fde70a5a5360d36e2266d0880787978c8551f58111c02c2c0d3212c3477140d3877a8910a65d9e17d038e639642aa9c
- SSDEEP 12288:TwKfOVRo9yRYZLmz4O8b8ITDnlr0bJUqm/VkUu+K6cNaSpDXVnc07:TxWVeyRYZLmz4O8b8ITDnlAKqEksKff7
- TLSH T182654B32F2C0C065D1667E3049AA8EB0F637BC556AE48B5B724C3B4E6F713A1DC26716
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
6/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-07-13_8954b8e851b10862d57dbec26731f846_elex_glassworm_remcos_smoke-loader_stealc_stop_tofsee.exe
Resource
win10v2004-20260513-en
8 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-07-13_8954b8e851b10862d57dbec26731f846_elex_glassworm_remcos_smoke-loader_stealc_stop_tofsee.exe
Resource
win11ltsc2024-20260709-en
8 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-07-13_8954b8e851b10862d57dbec26731f846_elex_glassworm_remcos_smoke-loader_stealc_stop_tofsee
- Size 1.4MB
- SHA256 4d9a2e41bb2421839fcf852e4d34e93fc1d5b9344aafe78d31ec73c82bf9fb05
- MD5 8954b8e851b10862d57dbec26731f846
- SHA1 fdd846de34a16886a62fb1bc3077c74ebc98961d
- SHA512 dab3798ceb03025a49c35294c44ebf259fde70a5a5360d36e2266d0880787978c8551f58111c02c2c0d3212c3477140d3877a8910a65d9e17d038e639642aa9c
- SSDEEP 12288:TwKfOVRo9yRYZLmz4O8b8ITDnlr0bJUqm/VkUu+K6cNaSpDXVnc07:TxWVeyRYZLmz4O8b8ITDnlAKqEksKff7
- TLSH T182654B32F2C0C065D1667E3049AA8EB0F637BC556AE48B5B724C3B4E6F713A1DC26716
- MD5 SHA1 SHA512 SSDEEP TLSH
Score6/10-
Adds Run key to start application
-
Checks installed software on the system
Looks up Uninstall key entries in the registry to enumerate software on the system.
-
Drops file in System32 directory