General
- Target 2026-07-19_985a4758b1b3d4c500d08fdaeb7daf04_elex_glassworm_remcos_smoke-loader_stealc_stop_tofsee
- Size 931KB
- Sample260720-bav3esax5r
- SHA256 ade1153c75da8770767cb802bcf182393c0b3df8ea31a09891488a98f2415223
- MD5 985a4758b1b3d4c500d08fdaeb7daf04
- SHA1 094ab194b426161821bcee9ed227001e841ce758
- SHA512 a87796ec6c21a990d77512d12cafe6f6555a2743b72dc0c9bf5ad373c03c3679e99c14e315036b25c0743e364a3be88c52af07fc978e17c619c6b03345eda8a0
- SSDEEP 12288:nwKfOVRo9yRYc4O8b8ITDnl20RVRwwNaSCDXV6TT:nxWVeyRYc4O8b8ITDnl9VRymT
- TLSH T13F153935B6E4C021D6A276348DBB8EA03625BC566FF4864B764C3B4E7F706B1CD22316
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
6/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-07-19_985a4758b1b3d4c500d08fdaeb7daf04_elex_glassworm_remcos_smoke-loader_stealc_stop_tofsee.exe
Resource
win10v2004-20260513-en
8 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-07-19_985a4758b1b3d4c500d08fdaeb7daf04_elex_glassworm_remcos_smoke-loader_stealc_stop_tofsee.exe
Resource
win11ltsc2024-20260709-en
8 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-07-19_985a4758b1b3d4c500d08fdaeb7daf04_elex_glassworm_remcos_smoke-loader_stealc_stop_tofsee
- Size 931KB
- SHA256 ade1153c75da8770767cb802bcf182393c0b3df8ea31a09891488a98f2415223
- MD5 985a4758b1b3d4c500d08fdaeb7daf04
- SHA1 094ab194b426161821bcee9ed227001e841ce758
- SHA512 a87796ec6c21a990d77512d12cafe6f6555a2743b72dc0c9bf5ad373c03c3679e99c14e315036b25c0743e364a3be88c52af07fc978e17c619c6b03345eda8a0
- SSDEEP 12288:nwKfOVRo9yRYc4O8b8ITDnl20RVRwwNaSCDXV6TT:nxWVeyRYc4O8b8ITDnl9VRymT
- TLSH T13F153935B6E4C021D6A276348DBB8EA03625BC566FF4864B764C3B4E7F706B1CD22316
- MD5 SHA1 SHA512 SSDEEP TLSH
Score6/10-
Adds Run key to start application
-
Checks installed software on the system
Looks up Uninstall key entries in the registry to enumerate software on the system.
-
Drops file in System32 directory