General
- Target 2026-07-21_b15600ae1eda28a616bb3a1b014f2b43_elex_glassworm_remcos_smoke-loader_stealc_stop_tofsee
- Size 3.9MB
- Sample260721-varvjsx1ay
- SHA256 0f939342c5998359ada8be5137e5b8303d1e81737ee1fe3f2fb2a64116ed0e6e
- MD5 b15600ae1eda28a616bb3a1b014f2b43
- SHA1 a2eab5f8be2a2b1cfd4570c6926453d63c974597
- SHA512 65d043d37a0406d361aa9e4c98160364c54f2f299744ad7990dca93f6d617ed0b511daad4667765a798b1fc32d83d41ec6d09c332a39677967f2c3ef419003e5
- SSDEEP 24576:7xWVeyRY14s2hzrwzYDteYIp6CsSkLHgZpJkvQ/vk4agWs8yKFMiX8nb4Udn89nb:78Y1zuzzCtkLHkJkv4f4v9lbFzfyZo9
- TLSH T16616D501A7F90644F1F36F756EB55254DF3ABD61AE36C21F2A88302E1972B908D61B33
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
6/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-07-21_b15600ae1eda28a616bb3a1b014f2b43_elex_glassworm_remcos_smoke-loader_stealc_stop_tofsee.exe
Resource
win10v2004-20260513-en
8 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-07-21_b15600ae1eda28a616bb3a1b014f2b43_elex_glassworm_remcos_smoke-loader_stealc_stop_tofsee.exe
Resource
win11ltsc2024-20260709-en
8 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-07-21_b15600ae1eda28a616bb3a1b014f2b43_elex_glassworm_remcos_smoke-loader_stealc_stop_tofsee
- Size 3.9MB
- SHA256 0f939342c5998359ada8be5137e5b8303d1e81737ee1fe3f2fb2a64116ed0e6e
- MD5 b15600ae1eda28a616bb3a1b014f2b43
- SHA1 a2eab5f8be2a2b1cfd4570c6926453d63c974597
- SHA512 65d043d37a0406d361aa9e4c98160364c54f2f299744ad7990dca93f6d617ed0b511daad4667765a798b1fc32d83d41ec6d09c332a39677967f2c3ef419003e5
- SSDEEP 24576:7xWVeyRY14s2hzrwzYDteYIp6CsSkLHgZpJkvQ/vk4agWs8yKFMiX8nb4Udn89nb:78Y1zuzzCtkLHkJkv4f4v9lbFzfyZo9
- TLSH T16616D501A7F90644F1F36F756EB55254DF3ABD61AE36C21F2A88302E1972B908D61B33
- MD5 SHA1 SHA512 SSDEEP TLSH
Score6/10-
Adds Run key to start application
-
Checks installed software on the system
Looks up Uninstall key entries in the registry to enumerate software on the system.
-
Drops file in System32 directory