General
- Target 2026-07-19_5dd3e3b1215e78265135b9ad81b16b1f_elex_glassworm_remcos_smoke-loader_stealc_stop_tofsee
- Size 934KB
- Sample260720-bvgersdz7v
- SHA256 283a506fa033074480e6bdf916c7373c09a9b49e37f04adff4feb455e8476ebc
- MD5 5dd3e3b1215e78265135b9ad81b16b1f
- SHA1 0678f2b8b7609e442ae988f282fad0e6948612ec
- SHA512 b0a17d6d53c2b0af8f23842ac21328b2e1e7aab91b9e194afbb58f9b9d54ad5280191ebd2e5f8a938ee6844c6a5e487a4de4902c61f6c649c91243f055954542
- SSDEEP 12288:LwKfOVRo9yRYP4O8b8ITDnl209xwwNaSCDXVdLe:LxWVeyRYP4O8b8ITDnlZxyve
- TLSH T14A152835B6E4C021D6A276348DBA8EA03625BC566FF4864F764C3B4E7F706B1CD22316
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
8/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-07-19_5dd3e3b1215e78265135b9ad81b16b1f_elex_glassworm_remcos_smoke-loader_stealc_stop_tofsee.exe
Resource
win10v2004-20260513-en
9 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-07-19_5dd3e3b1215e78265135b9ad81b16b1f_elex_glassworm_remcos_smoke-loader_stealc_stop_tofsee.exe
Resource
win11ltsc2024-20260710-en
9 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-07-19_5dd3e3b1215e78265135b9ad81b16b1f_elex_glassworm_remcos_smoke-loader_stealc_stop_tofsee
- Size 934KB
- SHA256 283a506fa033074480e6bdf916c7373c09a9b49e37f04adff4feb455e8476ebc
- MD5 5dd3e3b1215e78265135b9ad81b16b1f
- SHA1 0678f2b8b7609e442ae988f282fad0e6948612ec
- SHA512 b0a17d6d53c2b0af8f23842ac21328b2e1e7aab91b9e194afbb58f9b9d54ad5280191ebd2e5f8a938ee6844c6a5e487a4de4902c61f6c649c91243f055954542
- SSDEEP 12288:LwKfOVRo9yRYP4O8b8ITDnl209xwwNaSCDXVdLe:LxWVeyRYP4O8b8ITDnlZxyve
- TLSH T14A152835B6E4C021D6A276348DBA8EA03625BC566FF4864F764C3B4E7F706B1CD22316
- MD5 SHA1 SHA512 SSDEEP TLSH
Score8/10-
Drops file in Drivers directory
-
Adds Run key to start application
-
Checks installed software on the system
Looks up Uninstall key entries in the registry to enumerate software on the system.
-
Drops file in System32 directory