General
- Target 2026-07-19_3b03edb7ce4172752a4f83266142559a_coinminer_elex_glassworm_remcos_smoke-loader_stealc_stop_tofsee
- Size 937KB
- Sample260720-b15pjses4v
- SHA256 999a14faf39a891f4409751c5129b0aaacd091309688626225b83258961e3858
- MD5 3b03edb7ce4172752a4f83266142559a
- SHA1 33d8100d7cc36fca8b2f00995c1b166d09a39617
- SHA512 3f36062b700beb7a3833f742426252f601d0d31485bd4654ebd56164d729870f5c98ad7dec69dcff57112ecb48c2a5faa2d3ebb3b71f5561047784125b71c50f
- SSDEEP 12288:XwKfOVRo9yRYch4O8b8ITDnl209xwwNaSCDXVdw/1:XxWVeyRYch4O8b8ITDnlZxys/1
- TLSH T1EF153935B6E4C021D6A276348DBA9EA03625BC566FF4864F764C3B4E7F306B1CD22316
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
6/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-07-19_3b03edb7ce4172752a4f83266142559a_coinminer_elex_glassworm_remcos_smoke-loader_stealc_stop_tofsee.exe
Resource
win10v2004-20260513-en
8 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-07-19_3b03edb7ce4172752a4f83266142559a_coinminer_elex_glassworm_remcos_smoke-loader_stealc_stop_tofsee.exe
Resource
win11ltsc2024-20260709-en
8 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-07-19_3b03edb7ce4172752a4f83266142559a_coinminer_elex_glassworm_remcos_smoke-loader_stealc_stop_tofsee
- Size 937KB
- SHA256 999a14faf39a891f4409751c5129b0aaacd091309688626225b83258961e3858
- MD5 3b03edb7ce4172752a4f83266142559a
- SHA1 33d8100d7cc36fca8b2f00995c1b166d09a39617
- SHA512 3f36062b700beb7a3833f742426252f601d0d31485bd4654ebd56164d729870f5c98ad7dec69dcff57112ecb48c2a5faa2d3ebb3b71f5561047784125b71c50f
- SSDEEP 12288:XwKfOVRo9yRYch4O8b8ITDnl209xwwNaSCDXVdw/1:XxWVeyRYch4O8b8ITDnlZxys/1
- TLSH T1EF153935B6E4C021D6A276348DBA9EA03625BC566FF4864F764C3B4E7F306B1CD22316
- MD5 SHA1 SHA512 SSDEEP TLSH
Score6/10-
Adds Run key to start application
-
Checks installed software on the system
Looks up Uninstall key entries in the registry to enumerate software on the system.
-
Drops file in System32 directory