General
- Target 2026-07-17_924cb588234dab9f2733c144880fb645_elex_glassworm_remcos_smoke-loader_stealc_stop_tofsee
- Size 690KB
- Sample260717-1vs61aez7m
- SHA256 04c922f3aac10f6fb18cece048e023a45d2fc803c6436079a7c4be71fa22b8d3
- MD5 924cb588234dab9f2733c144880fb645
- SHA1 8c9ba9294c4eb5e3928d4dfa9cf0392d6c62cf28
- SHA512 1cfa089f652c2164af7c06448f29ff8a928d9d03a791838e21b8f34afedd2b29ccc04bbbb0452c611fc64725027933911782beee754658536e7a016506031516
- SSDEEP 6144:iwynAtMrOVRkidy9yIGWlUigVrQJUEJAifvJL9Dtnx4beY:iwKfOVRo9yRYer0mifvJuiY
- TLSH T13BE43911B6E4D022E9B35F340EBA86B0DA36BC166E34868FB64C374D5F727C1853572A
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
8/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-07-17_924cb588234dab9f2733c144880fb645_elex_glassworm_remcos_smoke-loader_stealc_stop_tofsee.exe
Resource
win10v2004-20260513-en
8 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-07-17_924cb588234dab9f2733c144880fb645_elex_glassworm_remcos_smoke-loader_stealc_stop_tofsee.exe
Resource
win11ltsc2024-20260709-en
9 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-07-17_924cb588234dab9f2733c144880fb645_elex_glassworm_remcos_smoke-loader_stealc_stop_tofsee
- Size 690KB
- SHA256 04c922f3aac10f6fb18cece048e023a45d2fc803c6436079a7c4be71fa22b8d3
- MD5 924cb588234dab9f2733c144880fb645
- SHA1 8c9ba9294c4eb5e3928d4dfa9cf0392d6c62cf28
- SHA512 1cfa089f652c2164af7c06448f29ff8a928d9d03a791838e21b8f34afedd2b29ccc04bbbb0452c611fc64725027933911782beee754658536e7a016506031516
- SSDEEP 6144:iwynAtMrOVRkidy9yIGWlUigVrQJUEJAifvJL9Dtnx4beY:iwKfOVRo9yRYer0mifvJuiY
- TLSH T13BE43911B6E4D022E9B35F340EBA86B0DA36BC166E34868FB64C374D5F727C1853572A
- MD5 SHA1 SHA512 SSDEEP TLSH
Score8/10-
Drops file in Drivers directory
-
Adds Run key to start application
-
Checks installed software on the system
Looks up Uninstall key entries in the registry to enumerate software on the system.
-
Drops file in System32 directory