General
- Target 2026-07-15_306b2aa025374c9d4f6fe20ccc6dd3bc_elex_glassworm_remcos_smoke-loader_stealc_stop_tofsee
- Size 2.1MB
- Sample260715-ftrlkae141
- SHA256 bc4fae537879f2a3429898eca164b46b8c845ffbae2ad727e9b4260bc869b0bb
- MD5 306b2aa025374c9d4f6fe20ccc6dd3bc
- SHA1 ec306d48516e858e60381a323c3b98c11b5423fc
- SHA512 3f10e31f2b300b41031681ea576a338804ddfdfd17947343c63425bcfce55da51968fced2ec5688c80cc3968b22cc4206765bf1e67516873bfd867d0d8ea4e59
- SSDEEP 24576:7xWVeyRYgf4s2hzntVIJqLgVQctM4je10Fir6:78YgfzuzntVxM2ctM4j8o
- TLSH T1A5A53A01BEFE8154F4B362709D7286651A65BC53FB3585AFB18C360ECBB1B814622F27
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
8/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-07-15_306b2aa025374c9d4f6fe20ccc6dd3bc_elex_glassworm_remcos_smoke-loader_stealc_stop_tofsee.exe
Resource
win10v2004-20260513-en
8 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-07-15_306b2aa025374c9d4f6fe20ccc6dd3bc_elex_glassworm_remcos_smoke-loader_stealc_stop_tofsee.exe
Resource
win11ltsc2024-20260710-en
9 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-07-15_306b2aa025374c9d4f6fe20ccc6dd3bc_elex_glassworm_remcos_smoke-loader_stealc_stop_tofsee
- Size 2.1MB
- SHA256 bc4fae537879f2a3429898eca164b46b8c845ffbae2ad727e9b4260bc869b0bb
- MD5 306b2aa025374c9d4f6fe20ccc6dd3bc
- SHA1 ec306d48516e858e60381a323c3b98c11b5423fc
- SHA512 3f10e31f2b300b41031681ea576a338804ddfdfd17947343c63425bcfce55da51968fced2ec5688c80cc3968b22cc4206765bf1e67516873bfd867d0d8ea4e59
- SSDEEP 24576:7xWVeyRYgf4s2hzntVIJqLgVQctM4je10Fir6:78YgfzuzntVxM2ctM4j8o
- TLSH T1A5A53A01BEFE8154F4B362709D7286651A65BC53FB3585AFB18C360ECBB1B814622F27
- MD5 SHA1 SHA512 SSDEEP TLSH
Score8/10Drops file in Drivers directory
Adds Run key to start application
Checks installed software on the system
Looks up Uninstall key entries in the registry to enumerate software on the system.
Drops file in System32 directory