General
- Target 2026-08-04_fcea0e1af68cf58589d26e4381c28b51_elex_glassworm_remcos_smoke-loader_stealc_stop_tofsee
- Size 13.6MB
- Sample260804-1xbdzayycv
- SHA256 155200b66463bf3bdf50274e6de078f908eddf128f9550d8b1d09766dd11ef27
- MD5 fcea0e1af68cf58589d26e4381c28b51
- SHA1 e7971ac344ec718c630d6f2e72cde4b4e0d447ea
- SHA512 5a28108909a66fb06c2d8d7b88e4a2cad2afc66d2709547fce51d76935495907bfc8e545c9cffd13dbb0e956ffb54d0877889e215353f2ea990d26f3a7299932
- SSDEEP 196608:dwspY5fVxdSZB0hGqdPofKsIkzHLqj2L3FCGRbki2C:U5fxSZBqGqlDgcowGRp
- TLSH T1DFE69E73B0A2A295EC2539B29A791D0CE7353CABCA449F7A70C8F0170E7365166D353B
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
6/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-08-04_fcea0e1af68cf58589d26e4381c28b51_elex_glassworm_remcos_smoke-loader_stealc_stop_tofsee.exe
Resource
win10v2004-20260513-en
8 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-08-04_fcea0e1af68cf58589d26e4381c28b51_elex_glassworm_remcos_smoke-loader_stealc_stop_tofsee.exe
Resource
win11ltsc2024-20260709-en
8 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-08-04_fcea0e1af68cf58589d26e4381c28b51_elex_glassworm_remcos_smoke-loader_stealc_stop_tofsee
- Size 13.6MB
- SHA256 155200b66463bf3bdf50274e6de078f908eddf128f9550d8b1d09766dd11ef27
- MD5 fcea0e1af68cf58589d26e4381c28b51
- SHA1 e7971ac344ec718c630d6f2e72cde4b4e0d447ea
- SHA512 5a28108909a66fb06c2d8d7b88e4a2cad2afc66d2709547fce51d76935495907bfc8e545c9cffd13dbb0e956ffb54d0877889e215353f2ea990d26f3a7299932
- SSDEEP 196608:dwspY5fVxdSZB0hGqdPofKsIkzHLqj2L3FCGRbki2C:U5fxSZBqGqlDgcowGRp
- TLSH T1DFE69E73B0A2A295EC2539B29A791D0CE7353CABCA449F7A70C8F0170E7365166D353B
- MD5 SHA1 SHA512 SSDEEP TLSH
Score6/10-
Adds Run key to start application
-
Checks installed software on the system
Looks up Uninstall key entries in the registry to enumerate software on the system.
-
Drops file in System32 directory