General
- Target 2026-07-22_0a82f3d0b8c723340023479d06f1b670_elex_glassworm_remcos_smoke-loader_stealc_stop_tofsee
- Size 2.9MB
- Sample260722-ypx7natepd
- SHA256 d47aef92248620b0b18a697e54def1ec7aa2b1c7c188c0ee6c81ca42849dac05
- MD5 0a82f3d0b8c723340023479d06f1b670
- SHA1 fba57ccab6d40047aff4ceac2c9deb9d479af256
- SHA512 400380c75cd8b101cbf65c4047821002fd555542d5cfad9238a82d9f672b6e8497ebabfcb4eb9ea1af978a4275363e7a193e51b3b2109052bf3a7517e98a7e49
- SSDEEP 24576:RxWVeyRYS4s2hzntVIJqW/RyiqmxRX9aiehY/w4c/oep0Rz3f:R8YSzuzntVxW/RZPxRX9PehD4c/osw
- TLSH T1CAE50862A6F9D124F5F72B30DD7546B94923BC92DA39819F324C391D2F30BA48971B23
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
6/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-07-22_0a82f3d0b8c723340023479d06f1b670_elex_glassworm_remcos_smoke-loader_stealc_stop_tofsee.exe
Resource
win10v2004-20260513-en
8 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-07-22_0a82f3d0b8c723340023479d06f1b670_elex_glassworm_remcos_smoke-loader_stealc_stop_tofsee.exe
Resource
win11ltsc2024-20260709-en
8 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-07-22_0a82f3d0b8c723340023479d06f1b670_elex_glassworm_remcos_smoke-loader_stealc_stop_tofsee
- Size 2.9MB
- SHA256 d47aef92248620b0b18a697e54def1ec7aa2b1c7c188c0ee6c81ca42849dac05
- MD5 0a82f3d0b8c723340023479d06f1b670
- SHA1 fba57ccab6d40047aff4ceac2c9deb9d479af256
- SHA512 400380c75cd8b101cbf65c4047821002fd555542d5cfad9238a82d9f672b6e8497ebabfcb4eb9ea1af978a4275363e7a193e51b3b2109052bf3a7517e98a7e49
- SSDEEP 24576:RxWVeyRYS4s2hzntVIJqW/RyiqmxRX9aiehY/w4c/oep0Rz3f:R8YSzuzntVxW/RZPxRX9PehD4c/osw
- TLSH T1CAE50862A6F9D124F5F72B30DD7546B94923BC92DA39819F324C391D2F30BA48971B23
- MD5 SHA1 SHA512 SSDEEP TLSH
Score6/10-
Adds Run key to start application
-
Checks installed software on the system
Looks up Uninstall key entries in the registry to enumerate software on the system.
-
Drops file in System32 directory