General
- Target 2026-07-20_63f44f1ce92efd4fcafccc40579e1b90_elex_glassworm_remcos_smoke-loader_stealc_stop_tofsee
- Size 2.0MB
- Sample260720-tct71sg19z
- SHA256 eae8b8bfb9619c326b12e53243463bb4c95f88a4462ae2222649cd6515d1af1f
- MD5 63f44f1ce92efd4fcafccc40579e1b90
- SHA1 3621f131a684a981417495b9f2a83bba9a3788e9
- SHA512 09b8f090b4797e42fedee820b8dac25653a2e6e97985106be3451223c62babc960149da9a9b63f907de31b16a4de51dd3c658158448fa441bc66769f34102017
- SSDEEP 49152:n8YQ4O8b8ITDnlGpSR7Xgo4TiRPnLWvJv:8kR7Xn4TiRCvJv
- TLSH T1D9A5CE35BAD4C021D6A3763499AB8FA436257C166FE0865F364C3B4E6F302B1FD25326
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
6/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-07-20_63f44f1ce92efd4fcafccc40579e1b90_elex_glassworm_remcos_smoke-loader_stealc_stop_tofsee.exe
Resource
win10v2004-20260513-en
8 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-07-20_63f44f1ce92efd4fcafccc40579e1b90_elex_glassworm_remcos_smoke-loader_stealc_stop_tofsee.exe
Resource
win11ltsc2024-20260709-en
8 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-07-20_63f44f1ce92efd4fcafccc40579e1b90_elex_glassworm_remcos_smoke-loader_stealc_stop_tofsee
- Size 2.0MB
- SHA256 eae8b8bfb9619c326b12e53243463bb4c95f88a4462ae2222649cd6515d1af1f
- MD5 63f44f1ce92efd4fcafccc40579e1b90
- SHA1 3621f131a684a981417495b9f2a83bba9a3788e9
- SHA512 09b8f090b4797e42fedee820b8dac25653a2e6e97985106be3451223c62babc960149da9a9b63f907de31b16a4de51dd3c658158448fa441bc66769f34102017
- SSDEEP 49152:n8YQ4O8b8ITDnlGpSR7Xgo4TiRPnLWvJv:8kR7Xn4TiRCvJv
- TLSH T1D9A5CE35BAD4C021D6A3763499AB8FA436257C166FE0865F364C3B4E6F302B1FD25326
- MD5 SHA1 SHA512 SSDEEP TLSH
Score6/10-
Adds Run key to start application
-
Checks installed software on the system
Looks up Uninstall key entries in the registry to enumerate software on the system.
-
Drops file in System32 directory