General
- Target 2026-07-19_b08cfc762ef26bf9561a6b0ceb15bde8_coinminer_elex_glassworm_remcos_smoke-loader_stealc_stop_tofsee
- Size 937KB
- Sample260720-a44e8aav5p
- SHA256 f0cf39a25e6475ef1f7ed0ad506a0986e69c7ec9ab19191bf1c485e2c9bede9e
- MD5 b08cfc762ef26bf9561a6b0ceb15bde8
- SHA1 a14001d28fa37626bf0e6c36416d2f3fe59780a3
- SHA512 7f1e8ced1e7271ac8b5e4360e14f67be5247d0391cd22d158c6e2a77b9773427cc8189be4f0b6231493a732e2416b1507dd64e16f9320e1f6e9cf56fcafa0914
- SSDEEP 12288:XwKfOVRo9yRYcF4O8b8ITDnl209xwwNaSCDXVdw/1:XxWVeyRYcF4O8b8ITDnlZxys/1
- TLSH T19E153935B6E4C021D6A276348DBA9EA03625BC566FF4864F764C3B4E7F306B1CD22316
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
6/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-07-19_b08cfc762ef26bf9561a6b0ceb15bde8_coinminer_elex_glassworm_remcos_smoke-loader_stealc_stop_tofsee.exe
Resource
win10v2004-20260513-en
8 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-07-19_b08cfc762ef26bf9561a6b0ceb15bde8_coinminer_elex_glassworm_remcos_smoke-loader_stealc_stop_tofsee.exe
Resource
win11ltsc2024-20260709-en
8 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-07-19_b08cfc762ef26bf9561a6b0ceb15bde8_coinminer_elex_glassworm_remcos_smoke-loader_stealc_stop_tofsee
- Size 937KB
- SHA256 f0cf39a25e6475ef1f7ed0ad506a0986e69c7ec9ab19191bf1c485e2c9bede9e
- MD5 b08cfc762ef26bf9561a6b0ceb15bde8
- SHA1 a14001d28fa37626bf0e6c36416d2f3fe59780a3
- SHA512 7f1e8ced1e7271ac8b5e4360e14f67be5247d0391cd22d158c6e2a77b9773427cc8189be4f0b6231493a732e2416b1507dd64e16f9320e1f6e9cf56fcafa0914
- SSDEEP 12288:XwKfOVRo9yRYcF4O8b8ITDnl209xwwNaSCDXVdw/1:XxWVeyRYcF4O8b8ITDnlZxys/1
- TLSH T19E153935B6E4C021D6A276348DBA9EA03625BC566FF4864F764C3B4E7F306B1CD22316
- MD5 SHA1 SHA512 SSDEEP TLSH
Score6/10-
Adds Run key to start application
-
Checks installed software on the system
Looks up Uninstall key entries in the registry to enumerate software on the system.
-
Drops file in System32 directory