General
- Target 2026-07-13_6dfb93569b083c1b825dea3a495e564a_elex_glassworm_remcos_smoke-loader_stealc_stop_tofsee
- Size 1.5MB
- Sample260714-bml1aabz9m
- SHA256 cb1430ac4705ae57f23da440a49fe6a4e224b507ce0a6af8e9da2eeb110f2680
- MD5 6dfb93569b083c1b825dea3a495e564a
- SHA1 d3d732e96659e72ca000a977f32e1102405c6533
- SHA512 df15c15b638ac95429feae03f7297411b3cbbb1ba62489cda3fa7bb07d575be80b10e5b1df712ffa1b3f05dc6b57aa521e4c2d408e9a52a76af9b9dff19e0695
- SSDEEP 12288:OwKfOVRo9yRYuv42X5sUSF14tl4O8b8ITDnlt07FX1GG1k0Op5:OxWVeyRYuv4s2hzC4O8b8ITDnlc38p5
- TLSH T13D75C42166E4CA11F2FB3A3089754A6429277C115DF887CE334ABF4E7BB16A4CD61723
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
6/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-07-13_6dfb93569b083c1b825dea3a495e564a_elex_glassworm_remcos_smoke-loader_stealc_stop_tofsee.exe
Resource
win10v2004-20260513-en
8 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-07-13_6dfb93569b083c1b825dea3a495e564a_elex_glassworm_remcos_smoke-loader_stealc_stop_tofsee.exe
Resource
win11ltsc2024-20260709-en
8 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-07-13_6dfb93569b083c1b825dea3a495e564a_elex_glassworm_remcos_smoke-loader_stealc_stop_tofsee
- Size 1.5MB
- SHA256 cb1430ac4705ae57f23da440a49fe6a4e224b507ce0a6af8e9da2eeb110f2680
- MD5 6dfb93569b083c1b825dea3a495e564a
- SHA1 d3d732e96659e72ca000a977f32e1102405c6533
- SHA512 df15c15b638ac95429feae03f7297411b3cbbb1ba62489cda3fa7bb07d575be80b10e5b1df712ffa1b3f05dc6b57aa521e4c2d408e9a52a76af9b9dff19e0695
- SSDEEP 12288:OwKfOVRo9yRYuv42X5sUSF14tl4O8b8ITDnlt07FX1GG1k0Op5:OxWVeyRYuv4s2hzC4O8b8ITDnlc38p5
- TLSH T13D75C42166E4CA11F2FB3A3089754A6429277C115DF887CE334ABF4E7BB16A4CD61723
- MD5 SHA1 SHA512 SSDEEP TLSH
Score6/10-
Adds Run key to start application
-
Checks installed software on the system
Looks up Uninstall key entries in the registry to enumerate software on the system.
-
Drops file in System32 directory