General
- Target 2026-07-20_6cec6d000cc628fb6d515bf083fb7fb0_elex_glassworm_remcos_smoke-loader_stealc_stop_tofsee
- Size 983KB
- Sample260720-lnwk8adv3m
- SHA256 f6d3de1a1e991ac9500beba317429cfb79a0c292c8651a76b81b9e292898363e
- MD5 6cec6d000cc628fb6d515bf083fb7fb0
- SHA1 51519e4ef95f20396374e415dbe2f852fd5eee17
- SHA512 546bf3f93fca41da0e90b6a678d3c6ead87abb0cca670a9a8226b55a31023cc0b9b1b3568ad0f70932a2b2363ad7fe39e48aa9c93ded7c3469b68654e5b61c09
- SSDEEP 12288:MwKfOVRo9yRYGLml4O8b8ITDnls0awL+6yvAWi:MxWVeyRYGLml4O8b8ITDnl3L+YWi
- TLSH T1A5252A22F1D8E454D4663E30097A8EA4FA36FC116AE09797329C3B0D6F717A2FD25316
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
6/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-07-20_6cec6d000cc628fb6d515bf083fb7fb0_elex_glassworm_remcos_smoke-loader_stealc_stop_tofsee.exe
Resource
win10v2004-20260513-en
8 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-07-20_6cec6d000cc628fb6d515bf083fb7fb0_elex_glassworm_remcos_smoke-loader_stealc_stop_tofsee.exe
Resource
win11ltsc2024-20260709-en
8 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-07-20_6cec6d000cc628fb6d515bf083fb7fb0_elex_glassworm_remcos_smoke-loader_stealc_stop_tofsee
- Size 983KB
- SHA256 f6d3de1a1e991ac9500beba317429cfb79a0c292c8651a76b81b9e292898363e
- MD5 6cec6d000cc628fb6d515bf083fb7fb0
- SHA1 51519e4ef95f20396374e415dbe2f852fd5eee17
- SHA512 546bf3f93fca41da0e90b6a678d3c6ead87abb0cca670a9a8226b55a31023cc0b9b1b3568ad0f70932a2b2363ad7fe39e48aa9c93ded7c3469b68654e5b61c09
- SSDEEP 12288:MwKfOVRo9yRYGLml4O8b8ITDnls0awL+6yvAWi:MxWVeyRYGLml4O8b8ITDnl3L+YWi
- TLSH T1A5252A22F1D8E454D4663E30097A8EA4FA36FC116AE09797329C3B0D6F717A2FD25316
- MD5 SHA1 SHA512 SSDEEP TLSH
Score6/10-
Adds Run key to start application
-
Checks installed software on the system
Looks up Uninstall key entries in the registry to enumerate software on the system.
-
Drops file in System32 directory