General
- Target 2026-07-23_2a0c2297b1991e889d46ffa1ad0c0bbf_elex_glassworm_remcos_smoke-loader_stealc_stop_tofsee
- Size 3.7MB
- Sample260723-v51e6stemb
- SHA256 ad375f025c486adb208903c47f22aa5909f6e0a5d887bda4c26dced0b396baea
- MD5 2a0c2297b1991e889d46ffa1ad0c0bbf
- SHA1 74576c637a0f2bb684fae7ffdb4e421798435205
- SHA512 a38abb1bd26cefd10e26bfcdc7d0eb40f10d4f57498e345fd4a29a55a3c459ddb5d7df6d850adce5f69f58826150bdc18c5747dff274d4967bf23797f4349a4c
- SSDEEP 24576:TxWVeyRYTTwzYDteYIp6OHkLHgZpJkvQ/vk4agWs8yKFMiX8nb4Udn89nlbFyKfi:T8YPikLHkJkv4f4v9lbFzfyZoU
- TLSH T15A06C501A7F90644F1F36F756AB55254DB36BD61AF36C21F2A88302E1972B90DD22B33
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
6/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-07-23_2a0c2297b1991e889d46ffa1ad0c0bbf_elex_glassworm_remcos_smoke-loader_stealc_stop_tofsee.exe
Resource
win10v2004-20260513-en
8 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-07-23_2a0c2297b1991e889d46ffa1ad0c0bbf_elex_glassworm_remcos_smoke-loader_stealc_stop_tofsee.exe
Resource
win11ltsc2024-20260709-en
8 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-07-23_2a0c2297b1991e889d46ffa1ad0c0bbf_elex_glassworm_remcos_smoke-loader_stealc_stop_tofsee
- Size 3.7MB
- SHA256 ad375f025c486adb208903c47f22aa5909f6e0a5d887bda4c26dced0b396baea
- MD5 2a0c2297b1991e889d46ffa1ad0c0bbf
- SHA1 74576c637a0f2bb684fae7ffdb4e421798435205
- SHA512 a38abb1bd26cefd10e26bfcdc7d0eb40f10d4f57498e345fd4a29a55a3c459ddb5d7df6d850adce5f69f58826150bdc18c5747dff274d4967bf23797f4349a4c
- SSDEEP 24576:TxWVeyRYTTwzYDteYIp6OHkLHgZpJkvQ/vk4agWs8yKFMiX8nb4Udn89nlbFyKfi:T8YPikLHkJkv4f4v9lbFzfyZoU
- TLSH T15A06C501A7F90644F1F36F756AB55254DB36BD61AF36C21F2A88302E1972B90DD22B33
- MD5 SHA1 SHA512 SSDEEP TLSH
Score6/10-
Adds Run key to start application
-
Checks installed software on the system
Looks up Uninstall key entries in the registry to enumerate software on the system.
-
Drops file in System32 directory