General
- Target 2026-07-27_12c11a9316a7e949219e6ab252289977_elex_glassworm_remcos_smoke-loader_stealc_stop_tofsee
- Size 2.0MB
- Sample260727-y4ph3a1bng
- SHA256 77ea8f473a21111f717d74ce48aec5882ef9a1b5c0616d4c2f92bf3f02ad1a48
- MD5 12c11a9316a7e949219e6ab252289977
- SHA1 b49f467066caffd3708d20b23b7e465d978f1ccf
- SHA512 0c483206d68453a741d675f0145ed66360ba3e3ac783d28ff0b6b879bc49055b422d6f022b3ea195a7f0dcfac18dce4374fc20e87a864af7d0b68763f37a390c
- SSDEEP 12288:iwKfOVRo9yRYB4O8b8ITDnlE8FF0Nqom77qvc:ixWVeyRYB4O8b8ITDnlrFMq4c
- TLSH T1FAA5C52176E0D815F2E226309D768AA429167C115EF88A8B374BFF8F7FF2564CD12316
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
6/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-07-27_12c11a9316a7e949219e6ab252289977_elex_glassworm_remcos_smoke-loader_stealc_stop_tofsee.exe
Resource
win10v2004-20260513-en
8 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-07-27_12c11a9316a7e949219e6ab252289977_elex_glassworm_remcos_smoke-loader_stealc_stop_tofsee.exe
Resource
win11ltsc2024-20260709-en
8 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-07-27_12c11a9316a7e949219e6ab252289977_elex_glassworm_remcos_smoke-loader_stealc_stop_tofsee
- Size 2.0MB
- SHA256 77ea8f473a21111f717d74ce48aec5882ef9a1b5c0616d4c2f92bf3f02ad1a48
- MD5 12c11a9316a7e949219e6ab252289977
- SHA1 b49f467066caffd3708d20b23b7e465d978f1ccf
- SHA512 0c483206d68453a741d675f0145ed66360ba3e3ac783d28ff0b6b879bc49055b422d6f022b3ea195a7f0dcfac18dce4374fc20e87a864af7d0b68763f37a390c
- SSDEEP 12288:iwKfOVRo9yRYB4O8b8ITDnlE8FF0Nqom77qvc:ixWVeyRYB4O8b8ITDnlrFMq4c
- TLSH T1FAA5C52176E0D815F2E226309D768AA429167C115EF88A8B374BFF8F7FF2564CD12316
- MD5 SHA1 SHA512 SSDEEP TLSH
Score6/10-
Adds Run key to start application
-
Checks installed software on the system
Looks up Uninstall key entries in the registry to enumerate software on the system.
-
Drops file in System32 directory