General
- Target 2026-08-01_bf563cdf1275d5f0e9c86c803434a893_elex_glassworm_remcos_smoke-loader_stealc_stop_tofsee
- Size 1.9MB
- Sample260801-3v8msszdkf
- SHA256 3acfb146e02c269ed92d811ec0af7401ea62571052a95f0d8edffffd118f05c7
- MD5 bf563cdf1275d5f0e9c86c803434a893
- SHA1 6eaa15b0dd3168281549e8f9cdfcc99b37a9ded2
- SHA512 ab4850529f6556c6eaf90132b5bc3fbdbc26aba125b368aae9c5f75b9715f46fd9665a56b05d64074ea8669a121f1840aaf333ca3730a5c58509063b897720cd
- SSDEEP 24576:JxWVeyRYev4s2hzntVIJqL4O8b8ITDnlJFxOV2oep0Rz3f:J8YKzuzntVxL4O8b8ITDnlJFAV2os4
- TLSH T1A8953A2175E5CA11F1EB623088B68A142522BC564FB546DF724DBF0F7FB16A4CE22B13
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
6/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-08-01_bf563cdf1275d5f0e9c86c803434a893_elex_glassworm_remcos_smoke-loader_stealc_stop_tofsee.exe
Resource
win10v2004-20260513-en
8 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-08-01_bf563cdf1275d5f0e9c86c803434a893_elex_glassworm_remcos_smoke-loader_stealc_stop_tofsee.exe
Resource
win11ltsc2024-20260709-en
8 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-08-01_bf563cdf1275d5f0e9c86c803434a893_elex_glassworm_remcos_smoke-loader_stealc_stop_tofsee
- Size 1.9MB
- SHA256 3acfb146e02c269ed92d811ec0af7401ea62571052a95f0d8edffffd118f05c7
- MD5 bf563cdf1275d5f0e9c86c803434a893
- SHA1 6eaa15b0dd3168281549e8f9cdfcc99b37a9ded2
- SHA512 ab4850529f6556c6eaf90132b5bc3fbdbc26aba125b368aae9c5f75b9715f46fd9665a56b05d64074ea8669a121f1840aaf333ca3730a5c58509063b897720cd
- SSDEEP 24576:JxWVeyRYev4s2hzntVIJqL4O8b8ITDnlJFxOV2oep0Rz3f:J8YKzuzntVxL4O8b8ITDnlJFAV2os4
- TLSH T1A8953A2175E5CA11F1EB623088B68A142522BC564FB546DF724DBF0F7FB16A4CE22B13
- MD5 SHA1 SHA512 SSDEEP TLSH
Score6/10-
Adds Run key to start application
-
Checks installed software on the system
Looks up Uninstall key entries in the registry to enumerate software on the system.
-
Drops file in System32 directory