General
- Target 2026-08-02_0399f70b96afc67d86527680371c6f23_elex_glassworm_remcos_smoke-loader_stealc_stop_tofsee
- Size 1.0MB
- Sample260802-yjsd8a1clh
- SHA256 5d3dde6c6520b4a647896aba76a5579f274e7f066c7fa166517ba41bbe64ef03
- MD5 0399f70b96afc67d86527680371c6f23
- SHA1 d0ecd8c0328f31f7ce510af704e1398e7be676f7
- SHA512 a4d00659bb4ef19f6129870411cf0792a57048745fb9971b7b03d16e8a3190a1191f0a42680eec93ea2bf7c0e42691dcf4612503684934a7109876dda4063262
- SSDEEP 12288:mwKfOVRo9yRYvyoLmW4O8b8ITDnlr0KLYQqLWxG2:mxWVeyRY6oLmW4O8b8ITDnl5YJLH2
- TLSH T174351923F1D4C011D4673E30096E8EA5FA36BC466BA09797325C3B0EAF757A1ED25326
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
6/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-08-02_0399f70b96afc67d86527680371c6f23_elex_glassworm_remcos_smoke-loader_stealc_stop_tofsee.exe
Resource
win10v2004-20260513-en
8 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-08-02_0399f70b96afc67d86527680371c6f23_elex_glassworm_remcos_smoke-loader_stealc_stop_tofsee.exe
Resource
win11ltsc2024-20260709-en
8 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-08-02_0399f70b96afc67d86527680371c6f23_elex_glassworm_remcos_smoke-loader_stealc_stop_tofsee
- Size 1.0MB
- SHA256 5d3dde6c6520b4a647896aba76a5579f274e7f066c7fa166517ba41bbe64ef03
- MD5 0399f70b96afc67d86527680371c6f23
- SHA1 d0ecd8c0328f31f7ce510af704e1398e7be676f7
- SHA512 a4d00659bb4ef19f6129870411cf0792a57048745fb9971b7b03d16e8a3190a1191f0a42680eec93ea2bf7c0e42691dcf4612503684934a7109876dda4063262
- SSDEEP 12288:mwKfOVRo9yRYvyoLmW4O8b8ITDnlr0KLYQqLWxG2:mxWVeyRY6oLmW4O8b8ITDnl5YJLH2
- TLSH T174351923F1D4C011D4673E30096E8EA5FA36BC466BA09797325C3B0EAF757A1ED25326
- MD5 SHA1 SHA512 SSDEEP TLSH
Score6/10-
Adds Run key to start application
-
Checks installed software on the system
Looks up Uninstall key entries in the registry to enumerate software on the system.
-
Drops file in System32 directory