General
- Target 2026-08-01_255b30be0e8c7622539370b6aa8d8b1e_elex_glassworm_remcos_smoke-loader_stealc_stop_tofsee
- Size 1.9MB
- Sample260802-bhf88sbc47
- SHA256 ad3e06f2ce70e357c7440becb53d0b83e52546533534cd517489c709c4071a9e
- MD5 255b30be0e8c7622539370b6aa8d8b1e
- SHA1 607d14afd5abdf3fdf68c5a065a1df1b5f559eb1
- SHA512 dc0195bb85df4205a5185f94c02c369e2e6b9d97da0505fc637cfd86cb8a0dbc50879b3c56e59437813821557d791f1e83f51b0d1ec55d2cc568dea59c31df9f
- SSDEEP 24576:5xWVeyRYxv4s2hzntVIJqL4O8b8ITDnlJFxOV2oep0Rz3f:58YtzuzntVxL4O8b8ITDnlJFAV2oss
- TLSH T1CF953A2175E5CA11F1EB623088B68A142522BC564FB546DF724DBF0F7FB16A4CE22B13
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
6/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-08-01_255b30be0e8c7622539370b6aa8d8b1e_elex_glassworm_remcos_smoke-loader_stealc_stop_tofsee.exe
Resource
win10v2004-20260513-en
8 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-08-01_255b30be0e8c7622539370b6aa8d8b1e_elex_glassworm_remcos_smoke-loader_stealc_stop_tofsee.exe
Resource
win11ltsc2024-20260709-en
8 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-08-01_255b30be0e8c7622539370b6aa8d8b1e_elex_glassworm_remcos_smoke-loader_stealc_stop_tofsee
- Size 1.9MB
- SHA256 ad3e06f2ce70e357c7440becb53d0b83e52546533534cd517489c709c4071a9e
- MD5 255b30be0e8c7622539370b6aa8d8b1e
- SHA1 607d14afd5abdf3fdf68c5a065a1df1b5f559eb1
- SHA512 dc0195bb85df4205a5185f94c02c369e2e6b9d97da0505fc637cfd86cb8a0dbc50879b3c56e59437813821557d791f1e83f51b0d1ec55d2cc568dea59c31df9f
- SSDEEP 24576:5xWVeyRYxv4s2hzntVIJqL4O8b8ITDnlJFxOV2oep0Rz3f:58YtzuzntVxL4O8b8ITDnlJFAV2oss
- TLSH T1CF953A2175E5CA11F1EB623088B68A142522BC564FB546DF724DBF0F7FB16A4CE22B13
- MD5 SHA1 SHA512 SSDEEP TLSH
Score6/10-
Adds Run key to start application
-
Checks installed software on the system
Looks up Uninstall key entries in the registry to enumerate software on the system.
-
Drops file in System32 directory