General
- Target 2026-07-17_956086b4159b049b59e00ba4b7d0ae88_elex_glassworm_remcos_smoke-loader_stealc_stop_tofsee
- Size 1.1MB
- Sample260717-1stdzsay6y
- SHA256 6ccef5d0b2e80b4ee943cae784603575b554371f27a88fcba116b43e392d2757
- MD5 956086b4159b049b59e00ba4b7d0ae88
- SHA1 0be186375b45f1748b2e8a65f1666b2c1cc55c30
- SHA512 2fee6a65d13095b155d8c5fff6b0ec9825bb5149066896c0c8c4636cd0692554b5a716963a1d4dc502c803b91286d7ddb382cab14b36340d79ff1d6003be7afc
- SSDEEP 12288:0wKfOVRo9yRYOz4O8b8ITDnljFF0iYQqLWHYQqLWepqT2:0xWVeyRYOz4O8b8ITDnljFhYJL4YJLy2
- TLSH T1D1451A21B2E48025F4B77B348D768AA43A36BC129E75C64F364C375E6F316B0DE21726
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
8/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-07-17_956086b4159b049b59e00ba4b7d0ae88_elex_glassworm_remcos_smoke-loader_stealc_stop_tofsee.exe
Resource
win10v2004-20260513-en
9 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-07-17_956086b4159b049b59e00ba4b7d0ae88_elex_glassworm_remcos_smoke-loader_stealc_stop_tofsee.exe
Resource
win11ltsc2024-20260709-en
8 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-07-17_956086b4159b049b59e00ba4b7d0ae88_elex_glassworm_remcos_smoke-loader_stealc_stop_tofsee
- Size 1.1MB
- SHA256 6ccef5d0b2e80b4ee943cae784603575b554371f27a88fcba116b43e392d2757
- MD5 956086b4159b049b59e00ba4b7d0ae88
- SHA1 0be186375b45f1748b2e8a65f1666b2c1cc55c30
- SHA512 2fee6a65d13095b155d8c5fff6b0ec9825bb5149066896c0c8c4636cd0692554b5a716963a1d4dc502c803b91286d7ddb382cab14b36340d79ff1d6003be7afc
- SSDEEP 12288:0wKfOVRo9yRYOz4O8b8ITDnljFF0iYQqLWHYQqLWepqT2:0xWVeyRYOz4O8b8ITDnljFhYJL4YJLy2
- TLSH T1D1451A21B2E48025F4B77B348D768AA43A36BC129E75C64F364C375E6F316B0DE21726
- MD5 SHA1 SHA512 SSDEEP TLSH
Score8/10-
Drops file in Drivers directory
-
Adds Run key to start application
-
Checks installed software on the system
Looks up Uninstall key entries in the registry to enumerate software on the system.
-
Drops file in System32 directory