General
- Target 2026-07-21_04665179bed42f3de35e5a30a2ea2ba9_elex_glassworm_remcos_smoke-loader_stealc_stop_tofsee
- Size 3.9MB
- Sample260721-wedddssapd
- SHA256 f526995bcddb793f4179b3286da0f9e9ce92f7069554928474e38cda3fce5454
- MD5 04665179bed42f3de35e5a30a2ea2ba9
- SHA1 df18d86ecc951f92803c81fb45945d7a526e49cb
- SHA512 ece00724ad5f65e13b6745f8ac80961abc284ec86cf8c184d940f7a029e85d4e5d6cf52213571975aa00567f875488697b74110160d9484fd10833677d497fbb
- SSDEEP 24576:HxWVeyRYC74s2hzrwzYDteYIp6CnSkLHgZpJkvQ/vk4agWs8yKFMiX8nb4Udn89f:H8YC7zuzzCSkLHkJkv4f4v9lbFzfyZoB
- TLSH T1E916D501A7F90644F1F36F756EB55254DF3ABD61AE36C21F2A88302E1972B908D61B33
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
6/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-07-21_04665179bed42f3de35e5a30a2ea2ba9_elex_glassworm_remcos_smoke-loader_stealc_stop_tofsee.exe
Resource
win10v2004-20260513-en
8 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-07-21_04665179bed42f3de35e5a30a2ea2ba9_elex_glassworm_remcos_smoke-loader_stealc_stop_tofsee.exe
Resource
win11ltsc2024-20260709-en
8 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-07-21_04665179bed42f3de35e5a30a2ea2ba9_elex_glassworm_remcos_smoke-loader_stealc_stop_tofsee
- Size 3.9MB
- SHA256 f526995bcddb793f4179b3286da0f9e9ce92f7069554928474e38cda3fce5454
- MD5 04665179bed42f3de35e5a30a2ea2ba9
- SHA1 df18d86ecc951f92803c81fb45945d7a526e49cb
- SHA512 ece00724ad5f65e13b6745f8ac80961abc284ec86cf8c184d940f7a029e85d4e5d6cf52213571975aa00567f875488697b74110160d9484fd10833677d497fbb
- SSDEEP 24576:HxWVeyRYC74s2hzrwzYDteYIp6CnSkLHgZpJkvQ/vk4agWs8yKFMiX8nb4Udn89f:H8YC7zuzzCSkLHkJkv4f4v9lbFzfyZoB
- TLSH T1E916D501A7F90644F1F36F756EB55254DF3ABD61AE36C21F2A88302E1972B908D61B33
- MD5 SHA1 SHA512 SSDEEP TLSH
Score6/10-
Adds Run key to start application
-
Checks installed software on the system
Looks up Uninstall key entries in the registry to enumerate software on the system.
-
Drops file in System32 directory