General
- Target 2026-07-18_8fcb1de147b4d779ef2409617d4565e0_coinminer_elex_glassworm_remcos_smoke-loader_stealc_stop_tofsee
- Size 1.5MB
- Sample260718-hybf9ae19v
- SHA256 a2515547e9cb6d68f594c8f16fb6111f57150989fe9edf1a486266bf9a75f5fc
- MD5 8fcb1de147b4d779ef2409617d4565e0
- SHA1 bd073d05d13819ece2247e87840007f89bb789d3
- SHA512 121cc71f7144ba32a3b3dc7cde14a8cb75c300cdded29fde60cd3fe5375270c5d5473b7e289cd85d40308c7834a7cd692298bb86479d366a531bf0f5c9891408
- SSDEEP 12288:MwKfOVRo9yRYp4O8b8ITDnlYb0PtS6UHZE:MxWVeyRYp4O8b8ITDnl3tSDE
- TLSH T181759421A3E4C015F6F33B309DB64A542A267C526EF5C64E3649B74F2FB16A0DD22723
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
6/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-07-18_8fcb1de147b4d779ef2409617d4565e0_coinminer_elex_glassworm_remcos_smoke-loader_stealc_stop_tofsee.exe
Resource
win10v2004-20260513-en
8 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-07-18_8fcb1de147b4d779ef2409617d4565e0_coinminer_elex_glassworm_remcos_smoke-loader_stealc_stop_tofsee.exe
Resource
win11ltsc2024-20260710-en
8 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-07-18_8fcb1de147b4d779ef2409617d4565e0_coinminer_elex_glassworm_remcos_smoke-loader_stealc_stop_tofsee
- Size 1.5MB
- SHA256 a2515547e9cb6d68f594c8f16fb6111f57150989fe9edf1a486266bf9a75f5fc
- MD5 8fcb1de147b4d779ef2409617d4565e0
- SHA1 bd073d05d13819ece2247e87840007f89bb789d3
- SHA512 121cc71f7144ba32a3b3dc7cde14a8cb75c300cdded29fde60cd3fe5375270c5d5473b7e289cd85d40308c7834a7cd692298bb86479d366a531bf0f5c9891408
- SSDEEP 12288:MwKfOVRo9yRYp4O8b8ITDnlYb0PtS6UHZE:MxWVeyRYp4O8b8ITDnl3tSDE
- TLSH T181759421A3E4C015F6F33B309DB64A542A267C526EF5C64E3649B74F2FB16A0DD22723
- MD5 SHA1 SHA512 SSDEEP TLSH
Score6/10-
Adds Run key to start application
-
Checks installed software on the system
Looks up Uninstall key entries in the registry to enumerate software on the system.
-
Drops file in System32 directory