General
- Target 2026-08-02_8b41266e941ba43c46bf7231a7d4e7a6_elex_glassworm_remcos_smoke-loader_stealc_stop_tofsee
- Size 1.1MB
- Sample260803-ac2gjsthrf
- SHA256 55b381b827ca1de26cbb7ddab5d0c86f1335d4c22fc475951cdaaa53f5ebba51
- MD5 8b41266e941ba43c46bf7231a7d4e7a6
- SHA1 ab2f99332f25851db0f42580ea0e8258330dde62
- SHA512 fc5d6ae128d63842c4a690541d8e9c0238a85240eaf3581837e73f3b1df4b866c470d4e1697580f10c3268631c2aa44852f06c432b070e2f7f02c748456d3bb3
- SSDEEP 24576:RxWVeyRYMdF1+nLZWMHb4O8b8ITDnl2B8:R8Y/b4O8b8ITDnl2B8
- TLSH T14F455E2162F98929F5F23F314A719F65EA36BC559AB8864E2259331D0F34BB1CD30723
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
6/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-08-02_8b41266e941ba43c46bf7231a7d4e7a6_elex_glassworm_remcos_smoke-loader_stealc_stop_tofsee.exe
Resource
win10v2004-20260513-en
8 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-08-02_8b41266e941ba43c46bf7231a7d4e7a6_elex_glassworm_remcos_smoke-loader_stealc_stop_tofsee.exe
Resource
win11ltsc2024-20260709-en
8 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-08-02_8b41266e941ba43c46bf7231a7d4e7a6_elex_glassworm_remcos_smoke-loader_stealc_stop_tofsee
- Size 1.1MB
- SHA256 55b381b827ca1de26cbb7ddab5d0c86f1335d4c22fc475951cdaaa53f5ebba51
- MD5 8b41266e941ba43c46bf7231a7d4e7a6
- SHA1 ab2f99332f25851db0f42580ea0e8258330dde62
- SHA512 fc5d6ae128d63842c4a690541d8e9c0238a85240eaf3581837e73f3b1df4b866c470d4e1697580f10c3268631c2aa44852f06c432b070e2f7f02c748456d3bb3
- SSDEEP 24576:RxWVeyRYMdF1+nLZWMHb4O8b8ITDnl2B8:R8Y/b4O8b8ITDnl2B8
- TLSH T14F455E2162F98929F5F23F314A719F65EA36BC559AB8864E2259331D0F34BB1CD30723
- MD5 SHA1 SHA512 SSDEEP TLSH
Score6/10-
Adds Run key to start application
-
Checks installed software on the system
Looks up Uninstall key entries in the registry to enumerate software on the system.
-
Drops file in System32 directory