General
- Target 2026-08-03_11386bf5a86a88025a94412b723d7357_elex_glassworm_remcos_smoke-loader_stealc_stop_tofsee
- Size 3.8MB
- Sample260804-dzgmfavtfw
- SHA256 a3ceff5991a0b0410b23e72199c60fc9d730b3d2bcf4859264acaa959715e566
- MD5 11386bf5a86a88025a94412b723d7357
- SHA1 26a2b7bac41c4963a280f6d0da02b792a6893d35
- SHA512 75b57695be1b5a134c04edc0bf6ce1828259b6ab09638d66d7b92ef682510c5dc293a9ce89b1b0972162b0e39d0a78cdb870461317c4babd69d6742a0f447c46
- SSDEEP 12288:vwKfOVRo9yRYfSOLmz4O8b8ITDnlzbRR0H4bCBbtspF0LXy90adM:vxWVeyRY6OLmz4O8b8ITDnl8ljspcyZM
- TLSH T17806F1B3B0A2A285DC1539B29A7A0D0CD7393CAB8E449EB674C8F5170E7365166D343F
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
6/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-08-03_11386bf5a86a88025a94412b723d7357_elex_glassworm_remcos_smoke-loader_stealc_stop_tofsee.exe
Resource
win10v2004-20260513-en
8 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-08-03_11386bf5a86a88025a94412b723d7357_elex_glassworm_remcos_smoke-loader_stealc_stop_tofsee.exe
Resource
win11ltsc2024-20260709-en
8 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-08-03_11386bf5a86a88025a94412b723d7357_elex_glassworm_remcos_smoke-loader_stealc_stop_tofsee
- Size 3.8MB
- SHA256 a3ceff5991a0b0410b23e72199c60fc9d730b3d2bcf4859264acaa959715e566
- MD5 11386bf5a86a88025a94412b723d7357
- SHA1 26a2b7bac41c4963a280f6d0da02b792a6893d35
- SHA512 75b57695be1b5a134c04edc0bf6ce1828259b6ab09638d66d7b92ef682510c5dc293a9ce89b1b0972162b0e39d0a78cdb870461317c4babd69d6742a0f447c46
- SSDEEP 12288:vwKfOVRo9yRYfSOLmz4O8b8ITDnlzbRR0H4bCBbtspF0LXy90adM:vxWVeyRY6OLmz4O8b8ITDnl8ljspcyZM
- TLSH T17806F1B3B0A2A285DC1539B29A7A0D0CD7393CAB8E449EB674C8F5170E7365166D343F
- MD5 SHA1 SHA512 SSDEEP TLSH
Score6/10-
Adds Run key to start application
-
Checks installed software on the system
Looks up Uninstall key entries in the registry to enumerate software on the system.
-
Drops file in System32 directory