General
- Target 2026-07-19_8403f3aeecc6b58523b8383be91c35d8_elex_glassworm_remcos_smoke-loader_stealc_stop_tofsee
- Size 2.0MB
- Sample260719-1ytxpsdw4j
- SHA256 65f1e7103f8c93d2668289f6c0836570cd63b3352bd767ff3400005338174779
- MD5 8403f3aeecc6b58523b8383be91c35d8
- SHA1 dc625b677ffc070d055b02e60b64ffb4470c4f3d
- SHA512 5197134d5d40970a79159d695b96f59d6c33b555c5978e2885e0696efc436a68e20381aeb1cdc0c86c08457e10cb97935d4951f732aeb354719e9ba5915a60f2
- SSDEEP 49152:N8Yc4O8b8ITDnlOQSR7Xgo4TiRPnLWvJm:uhR7Xn4TiRCvJm
- TLSH T13DA5CF35B6D0C021E6A3763499BB8FA436257C166FE0965F364C3B4E6F302A1FD25326
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
6/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-07-19_8403f3aeecc6b58523b8383be91c35d8_elex_glassworm_remcos_smoke-loader_stealc_stop_tofsee.exe
Resource
win10v2004-20260513-en
8 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-07-19_8403f3aeecc6b58523b8383be91c35d8_elex_glassworm_remcos_smoke-loader_stealc_stop_tofsee.exe
Resource
win11ltsc2024-20260710-en
8 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-07-19_8403f3aeecc6b58523b8383be91c35d8_elex_glassworm_remcos_smoke-loader_stealc_stop_tofsee
- Size 2.0MB
- SHA256 65f1e7103f8c93d2668289f6c0836570cd63b3352bd767ff3400005338174779
- MD5 8403f3aeecc6b58523b8383be91c35d8
- SHA1 dc625b677ffc070d055b02e60b64ffb4470c4f3d
- SHA512 5197134d5d40970a79159d695b96f59d6c33b555c5978e2885e0696efc436a68e20381aeb1cdc0c86c08457e10cb97935d4951f732aeb354719e9ba5915a60f2
- SSDEEP 49152:N8Yc4O8b8ITDnlOQSR7Xgo4TiRPnLWvJm:uhR7Xn4TiRCvJm
- TLSH T13DA5CF35B6D0C021E6A3763499BB8FA436257C166FE0965F364C3B4E6F302A1FD25326
- MD5 SHA1 SHA512 SSDEEP TLSH
Score6/10-
Adds Run key to start application
-
Checks installed software on the system
Looks up Uninstall key entries in the registry to enumerate software on the system.
-
Drops file in System32 directory