General
- Target 2026-08-02_86962964953080f195fce62f03087270_elex_glassworm_remcos_smoke-loader_stealc_stop_tofsee
- Size 3.6MB
- Sample260802-wejkeaybkf
- SHA256 b73c6756f754b847eee0313e3f00ad9b3a38d850c38bddaca7f581a181254ba1
- MD5 86962964953080f195fce62f03087270
- SHA1 37bde2df0edfb34a97c303de7285e59a4a03d087
- SHA512 1f15ccb0b34aec7a6903f0938ba003bc38ea1ae98c3d9b5181dea04e39e4c11654892b8d3b822c2278f1f8e0f797a1234e6f5f8626320cf53f3d0542d4e62001
- SSDEEP 24576:ExWVeyRYjrCHUQUK0C5mCtlb0+rHGYYvgNicbAH7j/cTw17mWXfjQtsy+k7Q3XyD:E8YHE5UKDlbnwVtYA4AB+mmHmQFFiDK
- TLSH T1320619F0B18C4A1FEF160EB0652C47E7F23A3D4A0B559ED66C9132CE38B6B594A17706
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
6/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-08-02_86962964953080f195fce62f03087270_elex_glassworm_remcos_smoke-loader_stealc_stop_tofsee.exe
Resource
win10v2004-20260513-en
8 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-08-02_86962964953080f195fce62f03087270_elex_glassworm_remcos_smoke-loader_stealc_stop_tofsee.exe
Resource
win11ltsc2024-20260709-en
8 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-08-02_86962964953080f195fce62f03087270_elex_glassworm_remcos_smoke-loader_stealc_stop_tofsee
- Size 3.6MB
- SHA256 b73c6756f754b847eee0313e3f00ad9b3a38d850c38bddaca7f581a181254ba1
- MD5 86962964953080f195fce62f03087270
- SHA1 37bde2df0edfb34a97c303de7285e59a4a03d087
- SHA512 1f15ccb0b34aec7a6903f0938ba003bc38ea1ae98c3d9b5181dea04e39e4c11654892b8d3b822c2278f1f8e0f797a1234e6f5f8626320cf53f3d0542d4e62001
- SSDEEP 24576:ExWVeyRYjrCHUQUK0C5mCtlb0+rHGYYvgNicbAH7j/cTw17mWXfjQtsy+k7Q3XyD:E8YHE5UKDlbnwVtYA4AB+mmHmQFFiDK
- TLSH T1320619F0B18C4A1FEF160EB0652C47E7F23A3D4A0B559ED66C9132CE38B6B594A17706
- MD5 SHA1 SHA512 SSDEEP TLSH
Score6/10-
Adds Run key to start application
-
Checks installed software on the system
Looks up Uninstall key entries in the registry to enumerate software on the system.
-
Drops file in System32 directory