General
- Target 2026-07-30_7656fec7df43776be61bbce1df674ec2_elex_glassworm_remcos_smoke-loader_stealc_stop_tofsee
- Size 1.0MB
- Sample260730-2cfzds1xft
- SHA256 42a63b3feb605d10ddeb6fad9daa7a05c306470f47881bf5b8841b360cbe4c9e
- MD5 7656fec7df43776be61bbce1df674ec2
- SHA1 2870813f1d383a0b9d62467a537038a3949218a1
- SHA512 7b33d3b47ca14ba15d6f67462862a5edd53a7b56d9dcda08e9abddea82036d9fc75ada2b06c6aa4cb6f434e6b5dda03cc2f1ea1e6ea134a522d44c88397aae02
- SSDEEP 12288:UwKfOVRo9yRY+YLm64O8b8ITDnlr0rYkt:UxWVeyRYjLm64O8b8ITDnlwxt
- TLSH T1DD35E922F2D4C010F6B73F30497A8AA0EA36BC516AB4868F765C3B1D5F717A1DD2531A
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
6/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-07-30_7656fec7df43776be61bbce1df674ec2_elex_glassworm_remcos_smoke-loader_stealc_stop_tofsee.exe
Resource
win10v2004-20260513-en
8 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-07-30_7656fec7df43776be61bbce1df674ec2_elex_glassworm_remcos_smoke-loader_stealc_stop_tofsee.exe
Resource
win11ltsc2024-20260709-en
8 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-07-30_7656fec7df43776be61bbce1df674ec2_elex_glassworm_remcos_smoke-loader_stealc_stop_tofsee
- Size 1.0MB
- SHA256 42a63b3feb605d10ddeb6fad9daa7a05c306470f47881bf5b8841b360cbe4c9e
- MD5 7656fec7df43776be61bbce1df674ec2
- SHA1 2870813f1d383a0b9d62467a537038a3949218a1
- SHA512 7b33d3b47ca14ba15d6f67462862a5edd53a7b56d9dcda08e9abddea82036d9fc75ada2b06c6aa4cb6f434e6b5dda03cc2f1ea1e6ea134a522d44c88397aae02
- SSDEEP 12288:UwKfOVRo9yRY+YLm64O8b8ITDnlr0rYkt:UxWVeyRYjLm64O8b8ITDnlwxt
- TLSH T1DD35E922F2D4C010F6B73F30497A8AA0EA36BC516AB4868F765C3B1D5F717A1DD2531A
- MD5 SHA1 SHA512 SSDEEP TLSH
Score6/10-
Adds Run key to start application
-
Checks installed software on the system
Looks up Uninstall key entries in the registry to enumerate software on the system.
-
Drops file in System32 directory