General
- Target 2026-07-20_e37113ee87cfe218a72a9e97d9f42a6a_elex_glassworm_remcos_smoke-loader_stealc_stop_tofsee
- Size 1.1MB
- Sample260720-vbpftagw4k
- SHA256 dc6c07d7b9b83867f1ce9b0b0e1dbc697ddb68aa0536db30617e1c54d8876b4b
- MD5 e37113ee87cfe218a72a9e97d9f42a6a
- SHA1 4ec5870776c8cb06709e9e1522d087d6234d8083
- SHA512 7a2e6d8112e1b1d1808c2919993accd89fb74cd4987f635ac427f84ec7c567f0ee635a73b537b90975874f57ebf637200b11430330ddfa43da549de1d738f1a7
- SSDEEP 12288:KwKfOVRo9yRYIS6VLmu4O8b8ITDnlW0KhieTx5K43Zru7f8:KxWVeyRYIpVLmu4O8b8ITDnlGhiQpkf8
- TLSH T106354B26F6C0C021D5A63E300D7A8EA4FA35BC126EE44B97365C3B4E6F717A1DD26316
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
6/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-07-20_e37113ee87cfe218a72a9e97d9f42a6a_elex_glassworm_remcos_smoke-loader_stealc_stop_tofsee.exe
Resource
win10v2004-20260513-en
8 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-07-20_e37113ee87cfe218a72a9e97d9f42a6a_elex_glassworm_remcos_smoke-loader_stealc_stop_tofsee.exe
Resource
win11ltsc2024-20260710-en
8 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-07-20_e37113ee87cfe218a72a9e97d9f42a6a_elex_glassworm_remcos_smoke-loader_stealc_stop_tofsee
- Size 1.1MB
- SHA256 dc6c07d7b9b83867f1ce9b0b0e1dbc697ddb68aa0536db30617e1c54d8876b4b
- MD5 e37113ee87cfe218a72a9e97d9f42a6a
- SHA1 4ec5870776c8cb06709e9e1522d087d6234d8083
- SHA512 7a2e6d8112e1b1d1808c2919993accd89fb74cd4987f635ac427f84ec7c567f0ee635a73b537b90975874f57ebf637200b11430330ddfa43da549de1d738f1a7
- SSDEEP 12288:KwKfOVRo9yRYIS6VLmu4O8b8ITDnlW0KhieTx5K43Zru7f8:KxWVeyRYIpVLmu4O8b8ITDnlGhiQpkf8
- TLSH T106354B26F6C0C021D5A63E300D7A8EA4FA35BC126EE44B97365C3B4E6F717A1DD26316
- MD5 SHA1 SHA512 SSDEEP TLSH
Score6/10-
Adds Run key to start application
-
Checks installed software on the system
Looks up Uninstall key entries in the registry to enumerate software on the system.
-
Drops file in System32 directory