General
- Target 2026-07-29_a09f23f29aa8ec33fe7fe7789872ebb2_elex_glassworm_remcos_smoke-loader_stealc_stop_tofsee
- Size 1.2MB
- Sample260729-ypltmaea53
- SHA256 c48d7b89902e231e1f52f9620f9ab99fbfe7448e6f179f2427d8d1a1b0ed78a1
- MD5 a09f23f29aa8ec33fe7fe7789872ebb2
- SHA1 39bc9ee891e18e5ed661390091c320b12d287001
- SHA512 e42b9dd929164cc5f3201b705e9f52d7bd9eacc8c26ddfa2334b7df42a5ef7a3b4afff55db09d6df0d5604ae19e8c0a90afa7293d3efdd37f18530e51b03709b
- SSDEEP 24576:oxWVeyRYs4O8b8ITDnl8Pe0bQBEUOnBNq4FNz:o8Ys4O8b8ITDnl8PeuQBEUOnBNqkNz
- TLSH T1E1458021A6E98928F5F23F314AB19E65E936BC2599F8850E3195371D0F39BB1CD30723
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
6/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-07-29_a09f23f29aa8ec33fe7fe7789872ebb2_elex_glassworm_remcos_smoke-loader_stealc_stop_tofsee.exe
Resource
win10v2004-20260513-en
8 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-07-29_a09f23f29aa8ec33fe7fe7789872ebb2_elex_glassworm_remcos_smoke-loader_stealc_stop_tofsee.exe
Resource
win11ltsc2024-20260709-en
8 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-07-29_a09f23f29aa8ec33fe7fe7789872ebb2_elex_glassworm_remcos_smoke-loader_stealc_stop_tofsee
- Size 1.2MB
- SHA256 c48d7b89902e231e1f52f9620f9ab99fbfe7448e6f179f2427d8d1a1b0ed78a1
- MD5 a09f23f29aa8ec33fe7fe7789872ebb2
- SHA1 39bc9ee891e18e5ed661390091c320b12d287001
- SHA512 e42b9dd929164cc5f3201b705e9f52d7bd9eacc8c26ddfa2334b7df42a5ef7a3b4afff55db09d6df0d5604ae19e8c0a90afa7293d3efdd37f18530e51b03709b
- SSDEEP 24576:oxWVeyRYs4O8b8ITDnl8Pe0bQBEUOnBNq4FNz:o8Ys4O8b8ITDnl8PeuQBEUOnBNqkNz
- TLSH T1E1458021A6E98928F5F23F314AB19E65E936BC2599F8850E3195371D0F39BB1CD30723
- MD5 SHA1 SHA512 SSDEEP TLSH
Score6/10-
Adds Run key to start application
-
Checks installed software on the system
Looks up Uninstall key entries in the registry to enumerate software on the system.
-
Drops file in System32 directory