General
- Target 2026-07-31_ce8679c39ef1b07df1f7dbe738918939_elex_glassworm_remcos_smoke-loader_stealc_stop_tofsee
- Size 1.0MB
- Sample260731-26483sam31
- SHA256 ec819ad413f61a7c1d247793b10a0b14ff777cf7194be85f227f09dfb7ac9bd1
- MD5 ce8679c39ef1b07df1f7dbe738918939
- SHA1 d84201566adbefc0bc6a0dd7834bcb043dab8049
- SHA512 7e721c5253c9b0ffa2e284406e4cc47ee9017c1582487d665933637221ae0ce8b1b5df036acb84b8dbc24b456d41588beb13113c0e62ae65fc1156dbb0b77c54
- SSDEEP 12288:9wKfOVRo9yRYG/ELm64O8b8ITDnlr0iz/:9xWVeyRYkELm64O8b8ITDnll/
- TLSH T16935E822F2D4C010E6B73F30497A8DA0EA36BC516AB4968F725C3B1D5F717A1DD2631A
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
6/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-07-31_ce8679c39ef1b07df1f7dbe738918939_elex_glassworm_remcos_smoke-loader_stealc_stop_tofsee.exe
Resource
win10v2004-20260513-en
8 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-07-31_ce8679c39ef1b07df1f7dbe738918939_elex_glassworm_remcos_smoke-loader_stealc_stop_tofsee.exe
Resource
win11ltsc2024-20260709-en
8 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-07-31_ce8679c39ef1b07df1f7dbe738918939_elex_glassworm_remcos_smoke-loader_stealc_stop_tofsee
- Size 1.0MB
- SHA256 ec819ad413f61a7c1d247793b10a0b14ff777cf7194be85f227f09dfb7ac9bd1
- MD5 ce8679c39ef1b07df1f7dbe738918939
- SHA1 d84201566adbefc0bc6a0dd7834bcb043dab8049
- SHA512 7e721c5253c9b0ffa2e284406e4cc47ee9017c1582487d665933637221ae0ce8b1b5df036acb84b8dbc24b456d41588beb13113c0e62ae65fc1156dbb0b77c54
- SSDEEP 12288:9wKfOVRo9yRYG/ELm64O8b8ITDnlr0iz/:9xWVeyRYkELm64O8b8ITDnll/
- TLSH T16935E822F2D4C010E6B73F30497A8DA0EA36BC516AB4968F725C3B1D5F717A1DD2631A
- MD5 SHA1 SHA512 SSDEEP TLSH
Score6/10-
Adds Run key to start application
-
Checks installed software on the system
Looks up Uninstall key entries in the registry to enumerate software on the system.
-
Drops file in System32 directory