General
- Target 2026-08-04_17445119f09381c461201473b3bff4eb_coinminer_elex_glassworm_remcos_smoke-loader_stealc_stop_tofsee
- Size 2.0MB
- Sample260804-j461savcqh
- SHA256 5a46b65b876684f928e5e5e15463b55a2d934fbac4ab67db9b028548b9df8e36
- MD5 17445119f09381c461201473b3bff4eb
- SHA1 2ffc02150c1d7921134758a08527e8b0f72a6132
- SHA512 49cd830838ef337aa4423259f8efd2d43cb5e35e5c56f17b90d558053d721b2a96e7bf7ea00a2ef0079febb4b8c630cfb73a28b796d55ae6851c07193124d93f
- SSDEEP 24576:DxWVeyRY84s2hzntVIJqg4O8b8ITDnlFA4m2Qxe10FgSN:D8Y8zuzntVxg4O8b8ITDnlFAH2Qx8g
- TLSH T1FEA50723B6E94117F4B3F73099B5867566667C5E9B35829E724C330E4F70A90CA22B33
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
6/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-08-04_17445119f09381c461201473b3bff4eb_coinminer_elex_glassworm_remcos_smoke-loader_stealc_stop_tofsee.exe
Resource
win10v2004-20260513-en
8 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-08-04_17445119f09381c461201473b3bff4eb_coinminer_elex_glassworm_remcos_smoke-loader_stealc_stop_tofsee.exe
Resource
win11ltsc2024-20260709-en
8 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-08-04_17445119f09381c461201473b3bff4eb_coinminer_elex_glassworm_remcos_smoke-loader_stealc_stop_tofsee
- Size 2.0MB
- SHA256 5a46b65b876684f928e5e5e15463b55a2d934fbac4ab67db9b028548b9df8e36
- MD5 17445119f09381c461201473b3bff4eb
- SHA1 2ffc02150c1d7921134758a08527e8b0f72a6132
- SHA512 49cd830838ef337aa4423259f8efd2d43cb5e35e5c56f17b90d558053d721b2a96e7bf7ea00a2ef0079febb4b8c630cfb73a28b796d55ae6851c07193124d93f
- SSDEEP 24576:DxWVeyRY84s2hzntVIJqg4O8b8ITDnlFA4m2Qxe10FgSN:D8Y8zuzntVxg4O8b8ITDnlFAH2Qx8g
- TLSH T1FEA50723B6E94117F4B3F73099B5867566667C5E9B35829E724C330E4F70A90CA22B33
- MD5 SHA1 SHA512 SSDEEP TLSH
Score6/10-
Adds Run key to start application
-
Checks installed software on the system
Looks up Uninstall key entries in the registry to enumerate software on the system.
-
Drops file in System32 directory