General
- Target 2026-08-03_e9dc6b9170abfee4b0c9246ca84a7ea0_elex_glassworm_remcos_smoke-loader_stealc_stop_tofsee
- Size 1.5MB
- Sample260803-t3w5astbja
- SHA256 245dca5767ea0bdf46af266375d558d1f6d690963165b6665fec8bad1f47aa1b
- MD5 e9dc6b9170abfee4b0c9246ca84a7ea0
- SHA1 474bb782e97f1108e0437ea27c33184a41262e4d
- SHA512 86addb77ca619841e110eb7a7a05f787a8904a6924e0f817cc0846b2bd52f5148e864da112109652514e702b71d00225330807763a5043b6c58fc02080e533fa
- SSDEEP 49152:S8Yh4O8b8ITDnlGU81666666zrY666P66fM6Yp:HZz
- TLSH T1F4758221B2F48514F2B63B30CD768AEC26A5BC22AD75C35F76843B5E2F31651CD2172A
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
6/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-08-03_e9dc6b9170abfee4b0c9246ca84a7ea0_elex_glassworm_remcos_smoke-loader_stealc_stop_tofsee.exe
Resource
win10v2004-20260513-en
8 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-08-03_e9dc6b9170abfee4b0c9246ca84a7ea0_elex_glassworm_remcos_smoke-loader_stealc_stop_tofsee.exe
Resource
win11ltsc2024-20260709-en
8 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-08-03_e9dc6b9170abfee4b0c9246ca84a7ea0_elex_glassworm_remcos_smoke-loader_stealc_stop_tofsee
- Size 1.5MB
- SHA256 245dca5767ea0bdf46af266375d558d1f6d690963165b6665fec8bad1f47aa1b
- MD5 e9dc6b9170abfee4b0c9246ca84a7ea0
- SHA1 474bb782e97f1108e0437ea27c33184a41262e4d
- SHA512 86addb77ca619841e110eb7a7a05f787a8904a6924e0f817cc0846b2bd52f5148e864da112109652514e702b71d00225330807763a5043b6c58fc02080e533fa
- SSDEEP 49152:S8Yh4O8b8ITDnlGU81666666zrY666P66fM6Yp:HZz
- TLSH T1F4758221B2F48514F2B63B30CD768AEC26A5BC22AD75C35F76843B5E2F31651CD2172A
- MD5 SHA1 SHA512 SSDEEP TLSH
Score6/10-
Adds Run key to start application
-
Checks installed software on the system
Looks up Uninstall key entries in the registry to enumerate software on the system.
-
Drops file in System32 directory