General
- Target 2026-08-04_41fa7d54081822bd8b0b641c425aea9c_elex_glassworm_remcos_smoke-loader_stealc_stop_tofsee
- Size 13.6MB
- Sample260804-23lmkazydt
- SHA256 f3140c9835ce0f349c610abd6f2b9401f0c17064fe214715317b02a3cfdd44fc
- MD5 41fa7d54081822bd8b0b641c425aea9c
- SHA1 16bdc1fec834925274b85bdd872174a02067a5c1
- SHA512 c815315bf7c29e1f8749c7df4ec5e806bf2910078bb57ab21d663f9bd8a59390dad179a5f62ef068873ee021b34780bb33356576185e6f7b493db765674a7037
- SSDEEP 196608:1+spN5fVxdSZB0hGqdPofKsIkzHLqj2L3FCGRbki2I:n5fxSZBqGqlDgcowGRP
- TLSH T108E69E73B0A2A295EC2539B29A791D0CE7353CABCA449F7A70C8F0170E7365166D353B
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
6/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-08-04_41fa7d54081822bd8b0b641c425aea9c_elex_glassworm_remcos_smoke-loader_stealc_stop_tofsee.exe
Resource
win10v2004-20260513-en
8 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-08-04_41fa7d54081822bd8b0b641c425aea9c_elex_glassworm_remcos_smoke-loader_stealc_stop_tofsee.exe
Resource
win11ltsc2024-20260709-en
8 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-08-04_41fa7d54081822bd8b0b641c425aea9c_elex_glassworm_remcos_smoke-loader_stealc_stop_tofsee
- Size 13.6MB
- SHA256 f3140c9835ce0f349c610abd6f2b9401f0c17064fe214715317b02a3cfdd44fc
- MD5 41fa7d54081822bd8b0b641c425aea9c
- SHA1 16bdc1fec834925274b85bdd872174a02067a5c1
- SHA512 c815315bf7c29e1f8749c7df4ec5e806bf2910078bb57ab21d663f9bd8a59390dad179a5f62ef068873ee021b34780bb33356576185e6f7b493db765674a7037
- SSDEEP 196608:1+spN5fVxdSZB0hGqdPofKsIkzHLqj2L3FCGRbki2I:n5fxSZBqGqlDgcowGRP
- TLSH T108E69E73B0A2A295EC2539B29A791D0CE7353CABCA449F7A70C8F0170E7365166D353B
- MD5 SHA1 SHA512 SSDEEP TLSH
Score6/10-
Adds Run key to start application
-
Checks installed software on the system
Looks up Uninstall key entries in the registry to enumerate software on the system.
-
Drops file in System32 directory