General
- Target 2026-07-20_fabc57e4485875b7b1d4aea03b093e56_elex_glassworm_remcos_smoke-loader_stealc_stop_tofsee
- Size 1.1MB
- Sample260720-t7nnqagt9p
- SHA256 bd7c0d78e2ef935e3a4afa463cd438c921e9c5e85b6029331cce11a9271db8e7
- MD5 fabc57e4485875b7b1d4aea03b093e56
- SHA1 71bcb888bbdb019949fd88fa16bc3c827d473f24
- SHA512 10ae24c0862fd070064a963272690ceb7eda05f95e897bfecf1ae9e9c5211596ac55d9d7804d6aa8824f1f44bfb8fa295a12808a8ef13fa5252f06e22d9ece6f
- SSDEEP 12288:6wKfOVRo9yRYkMLmu4O8b8ITDnlW0QU4NaSEUFhwXVuifk:6xWVeyRYkMLmu4O8b8ITDnlkQUrw3fk
- TLSH T167354A36F6D4C021D6A67E304DAB8EA0F635BC456EE4868B325C3B4E6F713A1DC25316
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
6/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-07-20_fabc57e4485875b7b1d4aea03b093e56_elex_glassworm_remcos_smoke-loader_stealc_stop_tofsee.exe
Resource
win10v2004-20260513-en
8 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-07-20_fabc57e4485875b7b1d4aea03b093e56_elex_glassworm_remcos_smoke-loader_stealc_stop_tofsee.exe
Resource
win11ltsc2024-20260709-en
8 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-07-20_fabc57e4485875b7b1d4aea03b093e56_elex_glassworm_remcos_smoke-loader_stealc_stop_tofsee
- Size 1.1MB
- SHA256 bd7c0d78e2ef935e3a4afa463cd438c921e9c5e85b6029331cce11a9271db8e7
- MD5 fabc57e4485875b7b1d4aea03b093e56
- SHA1 71bcb888bbdb019949fd88fa16bc3c827d473f24
- SHA512 10ae24c0862fd070064a963272690ceb7eda05f95e897bfecf1ae9e9c5211596ac55d9d7804d6aa8824f1f44bfb8fa295a12808a8ef13fa5252f06e22d9ece6f
- SSDEEP 12288:6wKfOVRo9yRYkMLmu4O8b8ITDnlW0QU4NaSEUFhwXVuifk:6xWVeyRYkMLmu4O8b8ITDnlkQUrw3fk
- TLSH T167354A36F6D4C021D6A67E304DAB8EA0F635BC456EE4868B325C3B4E6F713A1DC25316
- MD5 SHA1 SHA512 SSDEEP TLSH
Score6/10-
Adds Run key to start application
-
Checks installed software on the system
Looks up Uninstall key entries in the registry to enumerate software on the system.
-
Drops file in System32 directory