General
- Target 2026-07-29_98166a7b6b5a11d6f82b0d6d15d75dfc_elex_glassworm_remcos_smoke-loader_stealc_stop_tofsee
- Size 1023KB
- Sample260729-2cqtlaterh
- SHA256 17bc74e77f46956d1ec67185b108842f87dd5bdb3ac71da1c6d773ba5d57daf5
- MD5 98166a7b6b5a11d6f82b0d6d15d75dfc
- SHA1 b7c7ea2a631c5bae5ab1efe57f4fe75d60856431
- SHA512 cff54837a2d955b4f68de1e5bdf5d8a758814f34bbeb6f603c13322c2cda375028fcdf349ea6655c5d7ff0e9c39aea820b73334e47b5651f2529c885ab0c6a9b
- SSDEEP 12288:ywKfOVRo9yRY6z044O8b8ITDnl20hko5kh+EK8iDXVIpv:yxWVeyRYU044O8b8ITDnlNplGv
- TLSH T153255A35F6D4C021E5A276348EB78EA43625BC166EF5864B364C3B4EBF706B1CD22316
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
6/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-07-29_98166a7b6b5a11d6f82b0d6d15d75dfc_elex_glassworm_remcos_smoke-loader_stealc_stop_tofsee.exe
Resource
win10v2004-20260513-en
8 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-07-29_98166a7b6b5a11d6f82b0d6d15d75dfc_elex_glassworm_remcos_smoke-loader_stealc_stop_tofsee.exe
Resource
win11ltsc2024-20260709-en
8 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-07-29_98166a7b6b5a11d6f82b0d6d15d75dfc_elex_glassworm_remcos_smoke-loader_stealc_stop_tofsee
- Size 1023KB
- SHA256 17bc74e77f46956d1ec67185b108842f87dd5bdb3ac71da1c6d773ba5d57daf5
- MD5 98166a7b6b5a11d6f82b0d6d15d75dfc
- SHA1 b7c7ea2a631c5bae5ab1efe57f4fe75d60856431
- SHA512 cff54837a2d955b4f68de1e5bdf5d8a758814f34bbeb6f603c13322c2cda375028fcdf349ea6655c5d7ff0e9c39aea820b73334e47b5651f2529c885ab0c6a9b
- SSDEEP 12288:ywKfOVRo9yRY6z044O8b8ITDnl20hko5kh+EK8iDXVIpv:yxWVeyRYU044O8b8ITDnlNplGv
- TLSH T153255A35F6D4C021E5A276348EB78EA43625BC166EF5864B364C3B4EBF706B1CD22316
- MD5 SHA1 SHA512 SSDEEP TLSH
Score6/10Adds Run key to start application
Checks installed software on the system
Looks up Uninstall key entries in the registry to enumerate software on the system.
Drops file in System32 directory