General
- Target 2026-07-19_6182bb49114ac358bddfd0afce1d088d_elex_glassworm_remcos_smoke-loader_stealc_stop_tofsee
- Size 1.7MB
- Sample260719-2cmryad16r
- SHA256 e2381c5322bdc83bd876e9695363f534de492c01cec1aa7c6c6b23d43c024e2e
- MD5 6182bb49114ac358bddfd0afce1d088d
- SHA1 16ba90adc41f8486762a77e1ccdbcc58c8e089f8
- SHA512 798fcaa44f2adebf06f137f3d9e304a87aa3efc7138ae2d908050020f61dbe9fdc47d3744cc6fccbf188c2c7c00b29cc2f8c4db35fa34476e1c552c85ab3e35d
- SSDEEP 24576:CxWVeyRY7b4s2hzntVIJqd4O8b8ITDnlmtEeoep0Rz3h:C8YfzuzntVxd4O8b8ITDnlmt3osq
- TLSH T1BC857C35F9E59020E4A372708EA6CA683260BC4657B586DBB54C770FAF715E1CE33B12
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
8/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-07-19_6182bb49114ac358bddfd0afce1d088d_elex_glassworm_remcos_smoke-loader_stealc_stop_tofsee.exe
Resource
win10v2004-20260513-en
9 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-07-19_6182bb49114ac358bddfd0afce1d088d_elex_glassworm_remcos_smoke-loader_stealc_stop_tofsee.exe
Resource
win11ltsc2024-20260709-en
8 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-07-19_6182bb49114ac358bddfd0afce1d088d_elex_glassworm_remcos_smoke-loader_stealc_stop_tofsee
- Size 1.7MB
- SHA256 e2381c5322bdc83bd876e9695363f534de492c01cec1aa7c6c6b23d43c024e2e
- MD5 6182bb49114ac358bddfd0afce1d088d
- SHA1 16ba90adc41f8486762a77e1ccdbcc58c8e089f8
- SHA512 798fcaa44f2adebf06f137f3d9e304a87aa3efc7138ae2d908050020f61dbe9fdc47d3744cc6fccbf188c2c7c00b29cc2f8c4db35fa34476e1c552c85ab3e35d
- SSDEEP 24576:CxWVeyRY7b4s2hzntVIJqd4O8b8ITDnlmtEeoep0Rz3h:C8YfzuzntVxd4O8b8ITDnlmt3osq
- TLSH T1BC857C35F9E59020E4A372708EA6CA683260BC4657B586DBB54C770FAF715E1CE33B12
- MD5 SHA1 SHA512 SSDEEP TLSH
Score8/10-
Drops file in Drivers directory
-
Adds Run key to start application
-
Checks installed software on the system
Looks up Uninstall key entries in the registry to enumerate software on the system.
-
Drops file in System32 directory