General
- Target 2026-07-21_9c8e2afa716804202032d445ea13aaa0_elex_glassworm_remcos_smoke-loader_stealc_stop_tofsee
- Size 2.1MB
- Sample260721-3t56aage79
- SHA256 953f3c9633c5e5b584e0939e22ddd3ea831c31062678808d42c27dea47c6e795
- MD5 9c8e2afa716804202032d445ea13aaa0
- SHA1 7a75818aa7c3f9aef94a901a0483d98534f5c826
- SHA512 53141f59fdefe4fd1113e42186b2ead820f5c754042278aeb2de078dfc05d66362f2fc7cf11db671196342c9d86a4defb91cddab538c60b5a6fcfaecad718d9f
- SSDEEP 24576:KxWVeyRYia5jTXOw9HMobQi3AlbWAcAYDgWlZiibmwa+5v0DmZlbmw7orwi1KxOw:K8Y/5jrzsobQrhRR+mibhv0DmT6I6DkP
- TLSH T157A5CF11B3E48111F4FF2B341DB685A45E36BCA56E34C7AF72A9B20D1F70A809D6172E
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
6/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-07-21_9c8e2afa716804202032d445ea13aaa0_elex_glassworm_remcos_smoke-loader_stealc_stop_tofsee.exe
Resource
win10v2004-20260513-en
8 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-07-21_9c8e2afa716804202032d445ea13aaa0_elex_glassworm_remcos_smoke-loader_stealc_stop_tofsee.exe
Resource
win11ltsc2024-20260709-en
8 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-07-21_9c8e2afa716804202032d445ea13aaa0_elex_glassworm_remcos_smoke-loader_stealc_stop_tofsee
- Size 2.1MB
- SHA256 953f3c9633c5e5b584e0939e22ddd3ea831c31062678808d42c27dea47c6e795
- MD5 9c8e2afa716804202032d445ea13aaa0
- SHA1 7a75818aa7c3f9aef94a901a0483d98534f5c826
- SHA512 53141f59fdefe4fd1113e42186b2ead820f5c754042278aeb2de078dfc05d66362f2fc7cf11db671196342c9d86a4defb91cddab538c60b5a6fcfaecad718d9f
- SSDEEP 24576:KxWVeyRYia5jTXOw9HMobQi3AlbWAcAYDgWlZiibmwa+5v0DmZlbmw7orwi1KxOw:K8Y/5jrzsobQrhRR+mibhv0DmT6I6DkP
- TLSH T157A5CF11B3E48111F4FF2B341DB685A45E36BCA56E34C7AF72A9B20D1F70A809D6172E
- MD5 SHA1 SHA512 SSDEEP TLSH
Score6/10-
Adds Run key to start application
-
Checks installed software on the system
Looks up Uninstall key entries in the registry to enumerate software on the system.
-
Drops file in System32 directory