General
- Target 2026-07-20_554eb8aa2f8e0368e53797b132d10a47_elex_glassworm_remcos_smoke-loader_stealc_stop_tofsee
- Size 1.2MB
- Sample260720-rxstksds9j
- SHA256 7f2dc50bdfc42c5766b7fbf63afe0bc066c65f713228f10e03293bfe1b11703d
- MD5 554eb8aa2f8e0368e53797b132d10a47
- SHA1 3a4d4ba9301e603fa255cdddd60f4dfb85161f20
- SHA512 e06b8ff15dd7f707fe20c3c8c907b63de56a1ae186a2128013962f00dcd9d3bdd09b051563f195cc90fbdd0c6761f76672c86520367db856253df07422305607
- SSDEEP 12288:owKfOVRo9yRY+X2U4O8b8ITDnlC0iBoK+DXVak2H:oxWVeyRY+N4O8b8ITDnlimKaWH
- TLSH T1C745B525A7E88614F1BB7B309EB546A42A277C516E75C78F36443F4E3B70A60CD22723
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
6/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-07-20_554eb8aa2f8e0368e53797b132d10a47_elex_glassworm_remcos_smoke-loader_stealc_stop_tofsee.exe
Resource
win10v2004-20260513-en
8 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-07-20_554eb8aa2f8e0368e53797b132d10a47_elex_glassworm_remcos_smoke-loader_stealc_stop_tofsee.exe
Resource
win11ltsc2024-20260710-en
8 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-07-20_554eb8aa2f8e0368e53797b132d10a47_elex_glassworm_remcos_smoke-loader_stealc_stop_tofsee
- Size 1.2MB
- SHA256 7f2dc50bdfc42c5766b7fbf63afe0bc066c65f713228f10e03293bfe1b11703d
- MD5 554eb8aa2f8e0368e53797b132d10a47
- SHA1 3a4d4ba9301e603fa255cdddd60f4dfb85161f20
- SHA512 e06b8ff15dd7f707fe20c3c8c907b63de56a1ae186a2128013962f00dcd9d3bdd09b051563f195cc90fbdd0c6761f76672c86520367db856253df07422305607
- SSDEEP 12288:owKfOVRo9yRY+X2U4O8b8ITDnlC0iBoK+DXVak2H:oxWVeyRY+N4O8b8ITDnlimKaWH
- TLSH T1C745B525A7E88614F1BB7B309EB546A42A277C516E75C78F36443F4E3B70A60CD22723
- MD5 SHA1 SHA512 SSDEEP TLSH
Score6/10-
Adds Run key to start application
-
Checks installed software on the system
Looks up Uninstall key entries in the registry to enumerate software on the system.
-
Drops file in System32 directory