General
- Target 2026-07-30_1fa815efd64c5d3dc7ac7db637745521_elex_glassworm_remcos_smoke-loader_stealc_stop_tofsee
- Size 1.1MB
- Sample260730-2l36aagg59
- SHA256 39de4c14d7177f88358946f607520e4e052bb3d2b8dc7f46255fa8306b928f58
- MD5 1fa815efd64c5d3dc7ac7db637745521
- SHA1 6804d1ae602eb2b9d0ff7099b760673281d11c30
- SHA512 8bb3b6728b7ad931e15903f4d6840ba66986d8fd09615499ccfdd22a84528dfef6b5009424559568ea83dbc7711991b358bddac6b4aec86c09afc848f21231d6
- SSDEEP 24576:MxWVeyRY0z4O8b8ITDnljFspsYJL4YJLIh:M8Ye4O8b8ITDnljFspsYF4YF6
- TLSH T1E5451A21B2E48025F4B77B308D768AA43A36BC129E75C64F364C375E6F716B0DE21726
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
6/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-07-30_1fa815efd64c5d3dc7ac7db637745521_elex_glassworm_remcos_smoke-loader_stealc_stop_tofsee.exe
Resource
win10v2004-20260513-en
8 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-07-30_1fa815efd64c5d3dc7ac7db637745521_elex_glassworm_remcos_smoke-loader_stealc_stop_tofsee.exe
Resource
win11ltsc2024-20260709-en
8 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-07-30_1fa815efd64c5d3dc7ac7db637745521_elex_glassworm_remcos_smoke-loader_stealc_stop_tofsee
- Size 1.1MB
- SHA256 39de4c14d7177f88358946f607520e4e052bb3d2b8dc7f46255fa8306b928f58
- MD5 1fa815efd64c5d3dc7ac7db637745521
- SHA1 6804d1ae602eb2b9d0ff7099b760673281d11c30
- SHA512 8bb3b6728b7ad931e15903f4d6840ba66986d8fd09615499ccfdd22a84528dfef6b5009424559568ea83dbc7711991b358bddac6b4aec86c09afc848f21231d6
- SSDEEP 24576:MxWVeyRY0z4O8b8ITDnljFspsYJL4YJLIh:M8Ye4O8b8ITDnljFspsYF4YF6
- TLSH T1E5451A21B2E48025F4B77B308D768AA43A36BC129E75C64F364C375E6F716B0DE21726
- MD5 SHA1 SHA512 SSDEEP TLSH
Score6/10-
Adds Run key to start application
-
Checks installed software on the system
Looks up Uninstall key entries in the registry to enumerate software on the system.
-
Drops file in System32 directory