General
- Target 2026-07-27_bfc54ed2771232a3997a2b3860197be0_elex_glassworm_remcos_smoke-loader_stealc_stop_tofsee
- Size 1.8MB
- Sample260727-ylp2wadj9t
- SHA256 273f860085ef3a77800b7787b47e68e977bf24f59088a0c61db4feee6b892439
- MD5 bfc54ed2771232a3997a2b3860197be0
- SHA1 418ca54fe5719f153633ed5ab95f29981351efcc
- SHA512 ec5647acb4956bce880f29af35daa7bbe5803aad464d5c6648a012971224d1dceee51ed42784611f00500b557e63509210892fe84ba8a7a3b8fd6bc89470c9ad
- SSDEEP 24576:rxWVeyRY6e4s2hzntVIJqFEFxCxe10Fg8E:r8YFzuzntVxeFxCx8z
- TLSH T188950603B6E58513F0B3DE3049B6997A1625BC5E5E3682CF764C364EAF71780DA31B22
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
6/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-07-27_bfc54ed2771232a3997a2b3860197be0_elex_glassworm_remcos_smoke-loader_stealc_stop_tofsee.exe
Resource
win10v2004-20260513-en
8 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-07-27_bfc54ed2771232a3997a2b3860197be0_elex_glassworm_remcos_smoke-loader_stealc_stop_tofsee.exe
Resource
win11ltsc2024-20260709-en
8 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-07-27_bfc54ed2771232a3997a2b3860197be0_elex_glassworm_remcos_smoke-loader_stealc_stop_tofsee
- Size 1.8MB
- SHA256 273f860085ef3a77800b7787b47e68e977bf24f59088a0c61db4feee6b892439
- MD5 bfc54ed2771232a3997a2b3860197be0
- SHA1 418ca54fe5719f153633ed5ab95f29981351efcc
- SHA512 ec5647acb4956bce880f29af35daa7bbe5803aad464d5c6648a012971224d1dceee51ed42784611f00500b557e63509210892fe84ba8a7a3b8fd6bc89470c9ad
- SSDEEP 24576:rxWVeyRY6e4s2hzntVIJqFEFxCxe10Fg8E:r8YFzuzntVxeFxCx8z
- TLSH T188950603B6E58513F0B3DE3049B6997A1625BC5E5E3682CF764C364EAF71780DA31B22
- MD5 SHA1 SHA512 SSDEEP TLSH
Score6/10-
Adds Run key to start application
-
Checks installed software on the system
Looks up Uninstall key entries in the registry to enumerate software on the system.
-
Drops file in System32 directory