General
- Target 2026-07-22_64c727971daeb6aafe2895b4f2a03c71_elex_glassworm_remcos_smoke-loader_stealc_stop_tofsee
- Size 4.1MB
- Sample260722-hfl52aen2y
- SHA256 4e0d9e344f32f106ed3649c486015b66f5b3995b2710f2e8e43428af46483978
- MD5 64c727971daeb6aafe2895b4f2a03c71
- SHA1 f9651cc4814e9fb9ce2c12f7d28b4f7ecac2569b
- SHA512 c32ac88474399a1af0f7e23677d09e847ee6fc4b021d8f38066ff7bf5ecf15f3b8df01f2f0d2db766abe7d17462c5b426132ffebf1cc8ec537e6e4f34d222b6b
- SSDEEP 24576:HxWVeyRYDG4s2hzrwzYDteYIp6uwItxVkLHgZpJkvQ/vk4agWs8yKFMiX8nb4Udq:H8YizuzjuDFkLHkJkv4f4v9lbFzfyZof
- TLSH T11D16D501A7F94644F1F36F746EB55254DF36BD62AE36C21E2A88302E1972B90CD61B33
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
6/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-07-22_64c727971daeb6aafe2895b4f2a03c71_elex_glassworm_remcos_smoke-loader_stealc_stop_tofsee.exe
Resource
win10v2004-20260513-en
8 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-07-22_64c727971daeb6aafe2895b4f2a03c71_elex_glassworm_remcos_smoke-loader_stealc_stop_tofsee.exe
Resource
win11ltsc2024-20260709-en
8 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-07-22_64c727971daeb6aafe2895b4f2a03c71_elex_glassworm_remcos_smoke-loader_stealc_stop_tofsee
- Size 4.1MB
- SHA256 4e0d9e344f32f106ed3649c486015b66f5b3995b2710f2e8e43428af46483978
- MD5 64c727971daeb6aafe2895b4f2a03c71
- SHA1 f9651cc4814e9fb9ce2c12f7d28b4f7ecac2569b
- SHA512 c32ac88474399a1af0f7e23677d09e847ee6fc4b021d8f38066ff7bf5ecf15f3b8df01f2f0d2db766abe7d17462c5b426132ffebf1cc8ec537e6e4f34d222b6b
- SSDEEP 24576:HxWVeyRYDG4s2hzrwzYDteYIp6uwItxVkLHgZpJkvQ/vk4agWs8yKFMiX8nb4Udq:H8YizuzjuDFkLHkJkv4f4v9lbFzfyZof
- TLSH T11D16D501A7F94644F1F36F746EB55254DF36BD62AE36C21E2A88302E1972B90CD61B33
- MD5 SHA1 SHA512 SSDEEP TLSH
Score6/10-
Adds Run key to start application
-
Checks installed software on the system
Looks up Uninstall key entries in the registry to enumerate software on the system.
-
Drops file in System32 directory