General
- Target 2026-08-01_19c0a8520f559ce9bc0f3f5dde64bed6_elex_glassworm_remcos_smoke-loader_stealc_stop_tofsee
- Size 1.2MB
- Sample260801-13skfaybjf
- SHA256 e0c4d58a70f127c16cd9a39e27146d33d9720a4b84714089aff01566c9cc4641
- MD5 19c0a8520f559ce9bc0f3f5dde64bed6
- SHA1 5f980ab936ac83acf48386e9e0b241a01d39facf
- SHA512 57db9c29b3644443cc27845d0fcbb1fbd8b1edc82f42f11fa4bebf0e267b547da875798639c163f425a64f565d4cee45bf95fce7f9c0cbec6e23424cd72dc17d
- SSDEEP 24576:bxWVeyRYGz4O8b8ITDnljFNp4YJL4YJLVrr:b8YQ4O8b8ITDnljFNp4YF4YFN
- TLSH T1D6450921B2E48015F4B77B308D768EA43A36BC129EB5C64F368C375E6F716A0DD21726
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
6/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-08-01_19c0a8520f559ce9bc0f3f5dde64bed6_elex_glassworm_remcos_smoke-loader_stealc_stop_tofsee.exe
Resource
win10v2004-20260513-en
8 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-08-01_19c0a8520f559ce9bc0f3f5dde64bed6_elex_glassworm_remcos_smoke-loader_stealc_stop_tofsee.exe
Resource
win11ltsc2024-20260709-en
8 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-08-01_19c0a8520f559ce9bc0f3f5dde64bed6_elex_glassworm_remcos_smoke-loader_stealc_stop_tofsee
- Size 1.2MB
- SHA256 e0c4d58a70f127c16cd9a39e27146d33d9720a4b84714089aff01566c9cc4641
- MD5 19c0a8520f559ce9bc0f3f5dde64bed6
- SHA1 5f980ab936ac83acf48386e9e0b241a01d39facf
- SHA512 57db9c29b3644443cc27845d0fcbb1fbd8b1edc82f42f11fa4bebf0e267b547da875798639c163f425a64f565d4cee45bf95fce7f9c0cbec6e23424cd72dc17d
- SSDEEP 24576:bxWVeyRYGz4O8b8ITDnljFNp4YJL4YJLVrr:b8YQ4O8b8ITDnljFNp4YF4YFN
- TLSH T1D6450921B2E48015F4B77B308D768EA43A36BC129EB5C64F368C375E6F716A0DD21726
- MD5 SHA1 SHA512 SSDEEP TLSH
Score6/10-
Adds Run key to start application
-
Checks installed software on the system
Looks up Uninstall key entries in the registry to enumerate software on the system.
-
Drops file in System32 directory