General
- Target 2026-08-03_8900452392aa24ae822eecaae41055c9_elex_glassworm_remcos_smoke-loader_stealc_stop_tofsee
- Size 2.0MB
- Sample260803-fmn7vscc85
- SHA256 1ee1d48ec5da81231ee5f844051c3f7960f1dd0abf59b0fc5ce85c9bc13b25e4
- MD5 8900452392aa24ae822eecaae41055c9
- SHA1 282ac693c80fab5eef10aedaaf06e818bde22a94
- SHA512 650a076d46f91cfc70d626a2f000e7545012866fdd2bbc89eef811a7f34b5a683e436b92aee0ca9a923e90ffe2eba28f4a997f293bd6a1d944f6bab78cf03129
- SSDEEP 49152:t8Yozuz44O8b8ITDnlnFSQxn2Qxn2kFwC2Cri3f:OXzwSQxn2Qxn2kFwC2Bf
- TLSH T1B0A51A52B3E88119F5F77B309DB64AA01A36BC62AE79C14F3284371E1F71660DD22727
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
8/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-08-03_8900452392aa24ae822eecaae41055c9_elex_glassworm_remcos_smoke-loader_stealc_stop_tofsee.exe
Resource
win10v2004-20260513-en
8 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-08-03_8900452392aa24ae822eecaae41055c9_elex_glassworm_remcos_smoke-loader_stealc_stop_tofsee.exe
Resource
win11ltsc2024-20260709-en
9 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-08-03_8900452392aa24ae822eecaae41055c9_elex_glassworm_remcos_smoke-loader_stealc_stop_tofsee
- Size 2.0MB
- SHA256 1ee1d48ec5da81231ee5f844051c3f7960f1dd0abf59b0fc5ce85c9bc13b25e4
- MD5 8900452392aa24ae822eecaae41055c9
- SHA1 282ac693c80fab5eef10aedaaf06e818bde22a94
- SHA512 650a076d46f91cfc70d626a2f000e7545012866fdd2bbc89eef811a7f34b5a683e436b92aee0ca9a923e90ffe2eba28f4a997f293bd6a1d944f6bab78cf03129
- SSDEEP 49152:t8Yozuz44O8b8ITDnlnFSQxn2Qxn2kFwC2Cri3f:OXzwSQxn2Qxn2kFwC2Bf
- TLSH T1B0A51A52B3E88119F5F77B309DB64AA01A36BC62AE79C14F3284371E1F71660DD22727
- MD5 SHA1 SHA512 SSDEEP TLSH
Score8/10-
Drops file in Drivers directory
-
Adds Run key to start application
-
Checks installed software on the system
Looks up Uninstall key entries in the registry to enumerate software on the system.
-
Drops file in System32 directory