General
- Target 2026-07-16_517aa0a5d74574bdb920103a43b4c8dc_elex_glassworm_remcos_smoke-loader_stealc_stop_tofsee
- Size 1.5MB
- Sample260716-1bfrkaev3l
- SHA256 809302286bcb89422dbd0c8b77e427616d06f8266d75b237b0382c112445619e
- MD5 517aa0a5d74574bdb920103a43b4c8dc
- SHA1 7f1281fa76fe5617378698fc263599ac657c079f
- SHA512 f52da988ac9b34cf2b5ce7dc5e1f69431a9d6e6a6687dbe9aa7a0f0c7f9f0a8c3efd03b81c6ab12639e8d895c42e6dd3714117942c7fcb60b46d85e72143bca2
- SSDEEP 12288:swKfOVRo9yRYl4O8b8ITDnlYb03XGClyyGokII:sxWVeyRYl4O8b8ITDnl/XGWnI
- TLSH T12875942167E8D115F2F33B309DB54AA42A267C116EB9C64F3745B74F2FB1A60CD22722
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
6/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-07-16_517aa0a5d74574bdb920103a43b4c8dc_elex_glassworm_remcos_smoke-loader_stealc_stop_tofsee.exe
Resource
win10v2004-20260513-en
8 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-07-16_517aa0a5d74574bdb920103a43b4c8dc_elex_glassworm_remcos_smoke-loader_stealc_stop_tofsee.exe
Resource
win11ltsc2024-20260710-en
8 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-07-16_517aa0a5d74574bdb920103a43b4c8dc_elex_glassworm_remcos_smoke-loader_stealc_stop_tofsee
- Size 1.5MB
- SHA256 809302286bcb89422dbd0c8b77e427616d06f8266d75b237b0382c112445619e
- MD5 517aa0a5d74574bdb920103a43b4c8dc
- SHA1 7f1281fa76fe5617378698fc263599ac657c079f
- SHA512 f52da988ac9b34cf2b5ce7dc5e1f69431a9d6e6a6687dbe9aa7a0f0c7f9f0a8c3efd03b81c6ab12639e8d895c42e6dd3714117942c7fcb60b46d85e72143bca2
- SSDEEP 12288:swKfOVRo9yRYl4O8b8ITDnlYb03XGClyyGokII:sxWVeyRYl4O8b8ITDnl/XGWnI
- TLSH T12875942167E8D115F2F33B309DB54AA42A267C116EB9C64F3745B74F2FB1A60CD22722
- MD5 SHA1 SHA512 SSDEEP TLSH
Score6/10-
Adds Run key to start application
-
Checks installed software on the system
Looks up Uninstall key entries in the registry to enumerate software on the system.
-
Drops file in System32 directory