General
- Target 2026-07-19_4366da194bfd3a1d040bb19dbf1846ef_elex_glassworm_remcos_smoke-loader_stealc_stop_tofsee
- Size 957KB
- Sample260720-bztkwsbx3r
- SHA256 6fdf1c72a396b01ddb6563006dbfb53ab3238e400f394d469d05a8c5527f24d8
- MD5 4366da194bfd3a1d040bb19dbf1846ef
- SHA1 74850353115ca4eb78b29047e95a5f99cb837f88
- SHA512 09b8da87fad9cbdc29183321e6f223bae787e2670914856ca0d96a169f5998d3474ba10910870b0637ff767f372c739fdc7ccf6c18395274489c50d077c83fe5
- SSDEEP 12288:twKfOVRo9yRYL75C4O8b8ITDnl20HzNaSN0DXVM+pwk:txWVeyRYBC4O8b8ITDnlEiqwk
- TLSH T18E252835B6D4C022D2A376345DBB8BA43625BC1A6FF4964F364C3B4E6F306A1CD25326
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
6/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-07-19_4366da194bfd3a1d040bb19dbf1846ef_elex_glassworm_remcos_smoke-loader_stealc_stop_tofsee.exe
Resource
win10v2004-20260513-en
8 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-07-19_4366da194bfd3a1d040bb19dbf1846ef_elex_glassworm_remcos_smoke-loader_stealc_stop_tofsee.exe
Resource
win11ltsc2024-20260709-en
8 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-07-19_4366da194bfd3a1d040bb19dbf1846ef_elex_glassworm_remcos_smoke-loader_stealc_stop_tofsee
- Size 957KB
- SHA256 6fdf1c72a396b01ddb6563006dbfb53ab3238e400f394d469d05a8c5527f24d8
- MD5 4366da194bfd3a1d040bb19dbf1846ef
- SHA1 74850353115ca4eb78b29047e95a5f99cb837f88
- SHA512 09b8da87fad9cbdc29183321e6f223bae787e2670914856ca0d96a169f5998d3474ba10910870b0637ff767f372c739fdc7ccf6c18395274489c50d077c83fe5
- SSDEEP 12288:twKfOVRo9yRYL75C4O8b8ITDnl20HzNaSN0DXVM+pwk:txWVeyRYBC4O8b8ITDnlEiqwk
- TLSH T18E252835B6D4C022D2A376345DBB8BA43625BC1A6FF4964F364C3B4E6F306A1CD25326
- MD5 SHA1 SHA512 SSDEEP TLSH
Score6/10-
Adds Run key to start application
-
Checks installed software on the system
Looks up Uninstall key entries in the registry to enumerate software on the system.
-
Drops file in System32 directory