General
- Target 2026-08-02_98bc41230c4fc597fff53a5142a0f203_elex_glassworm_remcos_smoke-loader_stealc_stop_tofsee
- Size 1.2MB
- Sample260802-ge4s1stwe1
- SHA256 6da4ffcd7c8930f54e1b66738c58de322939ab7c5438360df1e3a4026413f5e9
- MD5 98bc41230c4fc597fff53a5142a0f203
- SHA1 8c3693eccefb25a2fd655a1fa33906423a900554
- SHA512 842f32fc7669c98fa2fd8717e8b52282e8a1717ae05ebee84bee5f154dd910e23acae094223e9a7e0f773e1ea62998bad49477af8a18fa324ab75942a7d2a6bf
- SSDEEP 24576:xxWVeyRY0or4O8b8ITDnlwk/rkkkkekkkokkkkC3VMq:x8YN4O8b8ITDnlwk/rkkkkekkkokkkky
- TLSH T13E45B63162F58125F3F77B34987946612A77BC52AAB8E24E2248332C5F747B0DD64B23
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
6/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-08-02_98bc41230c4fc597fff53a5142a0f203_elex_glassworm_remcos_smoke-loader_stealc_stop_tofsee.exe
Resource
win10v2004-20260513-en
8 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-08-02_98bc41230c4fc597fff53a5142a0f203_elex_glassworm_remcos_smoke-loader_stealc_stop_tofsee.exe
Resource
win11ltsc2024-20260709-en
8 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-08-02_98bc41230c4fc597fff53a5142a0f203_elex_glassworm_remcos_smoke-loader_stealc_stop_tofsee
- Size 1.2MB
- SHA256 6da4ffcd7c8930f54e1b66738c58de322939ab7c5438360df1e3a4026413f5e9
- MD5 98bc41230c4fc597fff53a5142a0f203
- SHA1 8c3693eccefb25a2fd655a1fa33906423a900554
- SHA512 842f32fc7669c98fa2fd8717e8b52282e8a1717ae05ebee84bee5f154dd910e23acae094223e9a7e0f773e1ea62998bad49477af8a18fa324ab75942a7d2a6bf
- SSDEEP 24576:xxWVeyRY0or4O8b8ITDnlwk/rkkkkekkkokkkkC3VMq:x8YN4O8b8ITDnlwk/rkkkkekkkokkkky
- TLSH T13E45B63162F58125F3F77B34987946612A77BC52AAB8E24E2248332C5F747B0DD64B23
- MD5 SHA1 SHA512 SSDEEP TLSH
Score6/10-
Adds Run key to start application
-
Checks installed software on the system
Looks up Uninstall key entries in the registry to enumerate software on the system.
-
Drops file in System32 directory