General
- Target 2026-08-02_369db185643e9c5f1b0a88a6e17b301d_elex_glassworm_remcos_smoke-loader_stealc_stop_tofsee
- Size 1.2MB
- Sample260802-1tcgvssfpg
- SHA256 10137bd22d583fbaf51300974ec3d50cfffb7cb115c2b10bb39c6aa0b5d33b0d
- MD5 369db185643e9c5f1b0a88a6e17b301d
- SHA1 d2c8f7021c8441b26c6c72834ddaf960c99ab8b4
- SHA512 5bf3c003de3e89e885173213e907ab000f9ac77e2aa0180a74143fe301fd274e99bd8ebdcad77609c7768b8e0763625d41079aae22549f66673b7ec2e865a969
- SSDEEP 24576:IxWVeyRY2Q7W4O8b8ITDnldSt7riih88ZOORwEw3A3HI3H73H/n73K3H23ojpn:I8Ys4O8b8ITDnl0t7riih88ZOOhR
- TLSH T11745E72663E85125F5F37B3099B86A546A6A7C11AEB5C54F3688334E4F34AE0CD33723
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
8/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-08-02_369db185643e9c5f1b0a88a6e17b301d_elex_glassworm_remcos_smoke-loader_stealc_stop_tofsee.exe
Resource
win10v2004-20260513-en
8 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-08-02_369db185643e9c5f1b0a88a6e17b301d_elex_glassworm_remcos_smoke-loader_stealc_stop_tofsee.exe
Resource
win11ltsc2024-20260709-en
9 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-08-02_369db185643e9c5f1b0a88a6e17b301d_elex_glassworm_remcos_smoke-loader_stealc_stop_tofsee
- Size 1.2MB
- SHA256 10137bd22d583fbaf51300974ec3d50cfffb7cb115c2b10bb39c6aa0b5d33b0d
- MD5 369db185643e9c5f1b0a88a6e17b301d
- SHA1 d2c8f7021c8441b26c6c72834ddaf960c99ab8b4
- SHA512 5bf3c003de3e89e885173213e907ab000f9ac77e2aa0180a74143fe301fd274e99bd8ebdcad77609c7768b8e0763625d41079aae22549f66673b7ec2e865a969
- SSDEEP 24576:IxWVeyRY2Q7W4O8b8ITDnldSt7riih88ZOORwEw3A3HI3H73H/n73K3H23ojpn:I8Ys4O8b8ITDnl0t7riih88ZOOhR
- TLSH T11745E72663E85125F5F37B3099B86A546A6A7C11AEB5C54F3688334E4F34AE0CD33723
- MD5 SHA1 SHA512 SSDEEP TLSH
Score8/10-
Drops file in Drivers directory
-
Adds Run key to start application
-
Checks installed software on the system
Looks up Uninstall key entries in the registry to enumerate software on the system.
-
Drops file in System32 directory