General
- Target 2026-08-03_cddf495af4f4e8feef4584a62063f4a9_elex_glassworm_remcos_smoke-loader_stealc_stop_tofsee
- Size 1.2MB
- Sample260803-vdttbatcrh
- SHA256 a9889ad4419b81c47a5ebe611ca3a891e13be0da46bfd597589f4b4fe35f5dd8
- MD5 cddf495af4f4e8feef4584a62063f4a9
- SHA1 da0592154ed5e07a7723a3846a28b668db5e48f7
- SHA512 90437cec63c7351d445a40220d64f3ea623ff6700b3a12bcf0327af5e8246320ea8ca2e9e3138e2f9761fdef4f862947270ca6c18d8f9f0297e521e76b971e4f
- SSDEEP 24576:jxWVeyRYz4s2hzhz4O8b8ITDnljFWSkN0u+5dZp:j8YzzuzB4O8b8ITDnljFWSkN0u+5R
- TLSH T12F551921B3E98115F5F73B305D768AA42E26BC52AE75C24F364C3B1E6F316A0DD20726
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
6/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-08-03_cddf495af4f4e8feef4584a62063f4a9_elex_glassworm_remcos_smoke-loader_stealc_stop_tofsee.exe
Resource
win10v2004-20260513-en
8 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-08-03_cddf495af4f4e8feef4584a62063f4a9_elex_glassworm_remcos_smoke-loader_stealc_stop_tofsee.exe
Resource
win11ltsc2024-20260709-en
8 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-08-03_cddf495af4f4e8feef4584a62063f4a9_elex_glassworm_remcos_smoke-loader_stealc_stop_tofsee
- Size 1.2MB
- SHA256 a9889ad4419b81c47a5ebe611ca3a891e13be0da46bfd597589f4b4fe35f5dd8
- MD5 cddf495af4f4e8feef4584a62063f4a9
- SHA1 da0592154ed5e07a7723a3846a28b668db5e48f7
- SHA512 90437cec63c7351d445a40220d64f3ea623ff6700b3a12bcf0327af5e8246320ea8ca2e9e3138e2f9761fdef4f862947270ca6c18d8f9f0297e521e76b971e4f
- SSDEEP 24576:jxWVeyRYz4s2hzhz4O8b8ITDnljFWSkN0u+5dZp:j8YzzuzB4O8b8ITDnljFWSkN0u+5R
- TLSH T12F551921B3E98115F5F73B305D768AA42E26BC52AE75C24F364C3B1E6F316A0DD20726
- MD5 SHA1 SHA512 SSDEEP TLSH
Score6/10-
Adds Run key to start application
-
Checks installed software on the system
Looks up Uninstall key entries in the registry to enumerate software on the system.
-
Drops file in System32 directory