General
- Target 2026-08-03_1b7c95941eabd177c3e1c0bb74b47f7f_elex_glassworm_remcos_smoke-loader_stealc_stop_tofsee
- Size 10.4MB
- Sample260803-xflltsywds
- SHA256 9eb4b593d4c19c7738ced1055a1040d22e2da332d311c6b9c785f5e581e26dcd
- MD5 1b7c95941eabd177c3e1c0bb74b47f7f
- SHA1 b5e6c064cfc1b6de7fd5a44939b80f93b00963c5
- SHA512 0a67f978fed31f8ad864f39eb995836bf5824e625c13a8186f5f68a23e8097e0b883b933b2b5745a8034a581cd2554d89246a57911af05759ec8578ef72f19da
- SSDEEP 196608:7A5fhxdSZB0hGqdPofKsIkzHLqj2L3FCGRbki21:05f9SZBqGqlDgcowGRK
- TLSH T135B61227F3D40232D15303729EAB9680EF35BCA96720574BB44DB10C7BB1AD19AB7396
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
6/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-08-03_1b7c95941eabd177c3e1c0bb74b47f7f_elex_glassworm_remcos_smoke-loader_stealc_stop_tofsee.exe
Resource
win10v2004-20260513-en
8 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-08-03_1b7c95941eabd177c3e1c0bb74b47f7f_elex_glassworm_remcos_smoke-loader_stealc_stop_tofsee.exe
Resource
win11ltsc2024-20260709-en
8 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-08-03_1b7c95941eabd177c3e1c0bb74b47f7f_elex_glassworm_remcos_smoke-loader_stealc_stop_tofsee
- Size 10.4MB
- SHA256 9eb4b593d4c19c7738ced1055a1040d22e2da332d311c6b9c785f5e581e26dcd
- MD5 1b7c95941eabd177c3e1c0bb74b47f7f
- SHA1 b5e6c064cfc1b6de7fd5a44939b80f93b00963c5
- SHA512 0a67f978fed31f8ad864f39eb995836bf5824e625c13a8186f5f68a23e8097e0b883b933b2b5745a8034a581cd2554d89246a57911af05759ec8578ef72f19da
- SSDEEP 196608:7A5fhxdSZB0hGqdPofKsIkzHLqj2L3FCGRbki21:05f9SZBqGqlDgcowGRK
- TLSH T135B61227F3D40232D15303729EAB9680EF35BCA96720574BB44DB10C7BB1AD19AB7396
- MD5 SHA1 SHA512 SSDEEP TLSH
Score6/10-
Adds Run key to start application
-
Checks installed software on the system
Looks up Uninstall key entries in the registry to enumerate software on the system.
-
Drops file in System32 directory