General
- Target 2026-08-01_3dafca0bd09a7015ea84a576e634a04f_elex_glassworm_remcos_smoke-loader_stealc_stop_tofsee
- Size 1.8MB
- Sample260801-rca32a1tct
- SHA256 6256e79f8942db617697a28f9cfc3b15521fe22f4f19ed076cab588483138b11
- MD5 3dafca0bd09a7015ea84a576e634a04f
- SHA1 8ad9cae859054b4b47d964a93fc3103677059de0
- SHA512 9d08eb8f7e5765d42f2104c1d56d93ae33d06bcce52325254da06a1c51b6fecccc01b3641585a07fd55a5d73395545d4bee5343854f08bb827183dc52ed918f4
- SSDEEP 24576:hxWVeyRYX44s2hzHz4O8b8ITDnljFWKoGqYb5dI:h8YIzuzT4O8b8ITDnljFWKYYb56
- TLSH T10585C423F3E48121E4B26F30D93789606A267C61AB75864E7658377E6FF07608923737
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
6/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-08-01_3dafca0bd09a7015ea84a576e634a04f_elex_glassworm_remcos_smoke-loader_stealc_stop_tofsee.exe
Resource
win10v2004-20260513-en
8 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-08-01_3dafca0bd09a7015ea84a576e634a04f_elex_glassworm_remcos_smoke-loader_stealc_stop_tofsee.exe
Resource
win11ltsc2024-20260709-en
8 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-08-01_3dafca0bd09a7015ea84a576e634a04f_elex_glassworm_remcos_smoke-loader_stealc_stop_tofsee
- Size 1.8MB
- SHA256 6256e79f8942db617697a28f9cfc3b15521fe22f4f19ed076cab588483138b11
- MD5 3dafca0bd09a7015ea84a576e634a04f
- SHA1 8ad9cae859054b4b47d964a93fc3103677059de0
- SHA512 9d08eb8f7e5765d42f2104c1d56d93ae33d06bcce52325254da06a1c51b6fecccc01b3641585a07fd55a5d73395545d4bee5343854f08bb827183dc52ed918f4
- SSDEEP 24576:hxWVeyRYX44s2hzHz4O8b8ITDnljFWKoGqYb5dI:h8YIzuzT4O8b8ITDnljFWKYYb56
- TLSH T10585C423F3E48121E4B26F30D93789606A267C61AB75864E7658377E6FF07608923737
- MD5 SHA1 SHA512 SSDEEP TLSH
Score6/10-
Adds Run key to start application
-
Checks installed software on the system
Looks up Uninstall key entries in the registry to enumerate software on the system.
-
Drops file in System32 directory