General
- Target 2026-07-28_8f0f1198eb54586b995d82b906a604fa_elex_glassworm_remcos_smoke-loader_stealc_stop_tofsee
- Size 10.9MB
- Sample260729-a45chsdb75
- SHA256 1756acf3a6439ec6e1bd4f2436472ad9ad19cb9fd049a638c304d6d1903ca323
- MD5 8f0f1198eb54586b995d82b906a604fa
- SHA1 8ea6be909108c1fcc05f080b4b5624695427a7d5
- SHA512 1527750b1ddf334919d5082e3e28701e3d0e8ef26734da0be6e5d325b6ad7b16e16a91ed6c338acaae319d778da415d364f4b87cd5becec7bd5a1dc175006eb1
- SSDEEP 196608:xtI5fVxdSZB0hGqdPofKsIkzHLqj2L3FCGRbki2R:DI5fxSZBqGqlDgcowGRu
- TLSH T10FB60227E3E50221F1B327719EBA5590AF36BC656674870F354C730D2BB1AA0DA72363
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
6/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-07-28_8f0f1198eb54586b995d82b906a604fa_elex_glassworm_remcos_smoke-loader_stealc_stop_tofsee.exe
Resource
win10v2004-20260513-en
8 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-07-28_8f0f1198eb54586b995d82b906a604fa_elex_glassworm_remcos_smoke-loader_stealc_stop_tofsee.exe
Resource
win11ltsc2024-20260709-en
8 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-07-28_8f0f1198eb54586b995d82b906a604fa_elex_glassworm_remcos_smoke-loader_stealc_stop_tofsee
- Size 10.9MB
- SHA256 1756acf3a6439ec6e1bd4f2436472ad9ad19cb9fd049a638c304d6d1903ca323
- MD5 8f0f1198eb54586b995d82b906a604fa
- SHA1 8ea6be909108c1fcc05f080b4b5624695427a7d5
- SHA512 1527750b1ddf334919d5082e3e28701e3d0e8ef26734da0be6e5d325b6ad7b16e16a91ed6c338acaae319d778da415d364f4b87cd5becec7bd5a1dc175006eb1
- SSDEEP 196608:xtI5fVxdSZB0hGqdPofKsIkzHLqj2L3FCGRbki2R:DI5fxSZBqGqlDgcowGRu
- TLSH T10FB60227E3E50221F1B327719EBA5590AF36BC656674870F354C730D2BB1AA0DA72363
- MD5 SHA1 SHA512 SSDEEP TLSH
Score6/10-
Adds Run key to start application
-
Checks installed software on the system
Looks up Uninstall key entries in the registry to enumerate software on the system.
-
Drops file in System32 directory