General
- Target 2026-08-04_dc98e8b6abb6a215326ea2bf4104189a_elex_glassworm_remcos_smoke-loader_stealc_stop_tofsee
- Size 13.6MB
- Sample260804-13kvlaer2v
- SHA256 ace7ec783bedfe74f3aab8f94f6ac9a2618a5a40b27ab3008a55dfeeb0f2bc84
- MD5 dc98e8b6abb6a215326ea2bf4104189a
- SHA1 72583ba6031c2238d1ddd4dac30746a48901624c
- SHA512 a98099e79e065512875fba2cb3b0673ff52fcf577a4393287a6d4cf0a33e61b831208878ee553e8c6eb4e9dde7819969ccc0fc508987a8026f9820813bd0f484
- SSDEEP 196608:dkspY5fVxdSZB0hGqdPofKsIkzHLqj2L3FCGRbki2C:A5fxSZBqGqlDgcowGRp
- TLSH T1D0E69E73B0A2A295EC2539B29A791D0CE7353CABCA449F7A70C8F0170E7365166D353B
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
6/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-08-04_dc98e8b6abb6a215326ea2bf4104189a_elex_glassworm_remcos_smoke-loader_stealc_stop_tofsee.exe
Resource
win10v2004-20260513-en
8 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-08-04_dc98e8b6abb6a215326ea2bf4104189a_elex_glassworm_remcos_smoke-loader_stealc_stop_tofsee.exe
Resource
win11ltsc2024-20260709-en
8 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-08-04_dc98e8b6abb6a215326ea2bf4104189a_elex_glassworm_remcos_smoke-loader_stealc_stop_tofsee
- Size 13.6MB
- SHA256 ace7ec783bedfe74f3aab8f94f6ac9a2618a5a40b27ab3008a55dfeeb0f2bc84
- MD5 dc98e8b6abb6a215326ea2bf4104189a
- SHA1 72583ba6031c2238d1ddd4dac30746a48901624c
- SHA512 a98099e79e065512875fba2cb3b0673ff52fcf577a4393287a6d4cf0a33e61b831208878ee553e8c6eb4e9dde7819969ccc0fc508987a8026f9820813bd0f484
- SSDEEP 196608:dkspY5fVxdSZB0hGqdPofKsIkzHLqj2L3FCGRbki2C:A5fxSZBqGqlDgcowGRp
- TLSH T1D0E69E73B0A2A295EC2539B29A791D0CE7353CABCA449F7A70C8F0170E7365166D353B
- MD5 SHA1 SHA512 SSDEEP TLSH
Score6/10-
Adds Run key to start application
-
Checks installed software on the system
Looks up Uninstall key entries in the registry to enumerate software on the system.
-
Drops file in System32 directory