General
- Target 2026-07-13_71f0d9b00d9c780d08deffc1c5ebf3c4_elex_glassworm_remcos_smoke-loader_stealc_stop_tofsee
- Size 1.5MB
- Sample260714-bk8fhad15y
- SHA256 24b87525cf6cb730465239d75111fcf3c4e0945b19ad61749134ac6dba70ae8e
- MD5 71f0d9b00d9c780d08deffc1c5ebf3c4
- SHA1 b69ecc6535f14f89d0bb690ee1f96d5b172f26a8
- SHA512 0d533dd872559ccf13316c83c8dc0ac078c47731a6eb31e2155f3175deb77b3ec8718451a68d10aab144eda28c91c22351d1ae0e920db5fbe395fe825a25ce38
- SSDEEP 24576:LxWVeyRYkLmh4O8b8ITDnlS2qEkHd3bWW:L8YF4O8b8ITDnl+3x
- TLSH T17575F823B2D4C017E0B6EF300A7A4AB0EA3B7C5D69B4868E7148374D5F75792EC25726
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
8/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-07-13_71f0d9b00d9c780d08deffc1c5ebf3c4_elex_glassworm_remcos_smoke-loader_stealc_stop_tofsee.exe
Resource
win10v2004-20260513-en
9 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-07-13_71f0d9b00d9c780d08deffc1c5ebf3c4_elex_glassworm_remcos_smoke-loader_stealc_stop_tofsee.exe
Resource
win11ltsc2024-20260709-en
8 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-07-13_71f0d9b00d9c780d08deffc1c5ebf3c4_elex_glassworm_remcos_smoke-loader_stealc_stop_tofsee
- Size 1.5MB
- SHA256 24b87525cf6cb730465239d75111fcf3c4e0945b19ad61749134ac6dba70ae8e
- MD5 71f0d9b00d9c780d08deffc1c5ebf3c4
- SHA1 b69ecc6535f14f89d0bb690ee1f96d5b172f26a8
- SHA512 0d533dd872559ccf13316c83c8dc0ac078c47731a6eb31e2155f3175deb77b3ec8718451a68d10aab144eda28c91c22351d1ae0e920db5fbe395fe825a25ce38
- SSDEEP 24576:LxWVeyRYkLmh4O8b8ITDnlS2qEkHd3bWW:L8YF4O8b8ITDnl+3x
- TLSH T17575F823B2D4C017E0B6EF300A7A4AB0EA3B7C5D69B4868E7148374D5F75792EC25726
- MD5 SHA1 SHA512 SSDEEP TLSH
Score8/10-
Drops file in Drivers directory
-
Adds Run key to start application
-
Checks installed software on the system
Looks up Uninstall key entries in the registry to enumerate software on the system.
-
Drops file in System32 directory