General
- Target 2026-08-02_46690ef553985344c881c9ac746529cc_elex_glassworm_remcos_smoke-loader_stealc_stop_tofsee
- Size 1.0MB
- Sample260802-xfbrmaec53
- SHA256 781ba0db9af8677d97ef4f98e8a43e4649b7eb8cef47334c38b6ea29bafc82e8
- MD5 46690ef553985344c881c9ac746529cc
- SHA1 b57d4047fa450ed50f2d9b5c55b200f6b554abb4
- SHA512 bc49bfec9be718ee56f28c2ee936d4446aa7a891b85900cbc68143469c6c09c1b3d88d5a3870f65eb424ab094803452d257cd2370d1b03771257aa5381d267b9
- SSDEEP 12288:+wKfOVRo9yRYtdLmW4O8b8ITDnlr0KLYQqLWxhS:+xWVeyRY7LmW4O8b8ITDnl5YJL8S
- TLSH T1E8351923F1D4C011D4A73E30096E8EA5FA36BC466BA09797325C3B0EAF757A1DD25326
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
6/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-08-02_46690ef553985344c881c9ac746529cc_elex_glassworm_remcos_smoke-loader_stealc_stop_tofsee.exe
Resource
win10v2004-20260513-en
8 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-08-02_46690ef553985344c881c9ac746529cc_elex_glassworm_remcos_smoke-loader_stealc_stop_tofsee.exe
Resource
win11ltsc2024-20260709-en
8 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-08-02_46690ef553985344c881c9ac746529cc_elex_glassworm_remcos_smoke-loader_stealc_stop_tofsee
- Size 1.0MB
- SHA256 781ba0db9af8677d97ef4f98e8a43e4649b7eb8cef47334c38b6ea29bafc82e8
- MD5 46690ef553985344c881c9ac746529cc
- SHA1 b57d4047fa450ed50f2d9b5c55b200f6b554abb4
- SHA512 bc49bfec9be718ee56f28c2ee936d4446aa7a891b85900cbc68143469c6c09c1b3d88d5a3870f65eb424ab094803452d257cd2370d1b03771257aa5381d267b9
- SSDEEP 12288:+wKfOVRo9yRYtdLmW4O8b8ITDnlr0KLYQqLWxhS:+xWVeyRY7LmW4O8b8ITDnl5YJL8S
- TLSH T1E8351923F1D4C011D4A73E30096E8EA5FA36BC466BA09797325C3B0EAF757A1DD25326
- MD5 SHA1 SHA512 SSDEEP TLSH
Score6/10-
Adds Run key to start application
-
Checks installed software on the system
Looks up Uninstall key entries in the registry to enumerate software on the system.
-
Drops file in System32 directory