General
- Target 2026-07-19_4043d06ac371d68bed993e022b501fd4_elex_glassworm_remcos_smoke-loader_stealc_stop_tofsee
- Size 1.2MB
- Sample260719-vm73ashz61
- SHA256 bcc029dd9b09a4166b67a92939646b61f42651c444142081472fea78f51686cd
- MD5 4043d06ac371d68bed993e022b501fd4
- SHA1 61355858a474bf12de3e93173a243592a1371ba6
- SHA512 aee30873bd9f64d85d3de9a97967e7c348d925ba4dcfdcff214ef972756e051dcfaddcdbbe94aa89991116b1dc50782191914fcb5e579c21cf01c870172b7ecf
- SSDEEP 24576:FxWVeyRYTOYIsLm98BTf4O8b8ITDnl2VD:F8YkcTf4O8b8ITDnl8
- TLSH T172453A62F294D011E4A72E31087B8D70F936BC556AF08797324C7B2E6FB23A1DD29719
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
6/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-07-19_4043d06ac371d68bed993e022b501fd4_elex_glassworm_remcos_smoke-loader_stealc_stop_tofsee.exe
Resource
win10v2004-20260513-en
8 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-07-19_4043d06ac371d68bed993e022b501fd4_elex_glassworm_remcos_smoke-loader_stealc_stop_tofsee.exe
Resource
win11ltsc2024-20260709-en
8 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-07-19_4043d06ac371d68bed993e022b501fd4_elex_glassworm_remcos_smoke-loader_stealc_stop_tofsee
- Size 1.2MB
- SHA256 bcc029dd9b09a4166b67a92939646b61f42651c444142081472fea78f51686cd
- MD5 4043d06ac371d68bed993e022b501fd4
- SHA1 61355858a474bf12de3e93173a243592a1371ba6
- SHA512 aee30873bd9f64d85d3de9a97967e7c348d925ba4dcfdcff214ef972756e051dcfaddcdbbe94aa89991116b1dc50782191914fcb5e579c21cf01c870172b7ecf
- SSDEEP 24576:FxWVeyRYTOYIsLm98BTf4O8b8ITDnl2VD:F8YkcTf4O8b8ITDnl8
- TLSH T172453A62F294D011E4A72E31087B8D70F936BC556AF08797324C7B2E6FB23A1DD29719
- MD5 SHA1 SHA512 SSDEEP TLSH
Score6/10-
Adds Run key to start application
-
Checks installed software on the system
Looks up Uninstall key entries in the registry to enumerate software on the system.
-
Drops file in System32 directory