General
- Target 2026-08-03_78a208538e82a0ff3908a6da92ee29ae_elex_glassworm_remcos_stop_tobfy
- Size 10.5MB
- Sample260804-ncf3havsct
- SHA256 189a50ed4062f06ae3c217af6ce570c8865e745e075316b6e5188d2d945e3fa7
- MD5 78a208538e82a0ff3908a6da92ee29ae
- SHA1 5b6deef1780373b6d0c4f874b8e0c8fff5193f03
- SHA512 a1fe2b37a03955440b2be3ce5e7ae6765b2cc3e5404c73f6331641d3a2135e13e5fe3f9e1bfb03fb494fcc02c6601f593f554f69ab9ce4f88e8342c9ddf92506
- SSDEEP 98304:+zuydx/MH3D8GynF9S7dCcz31dI3tarxWpYF2Sc694X0KsDDRcbrk:+xUXD89FaPprxEYTcO4qDDm/k
- TLSH T157B69E02F7E540A4E4E72AB0987B76259A3ABE0A47F4C1FF96547D0EAE327C15870353
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
5/10
Static task
static1
Behavioral task
behavioral1
Sample
2026-08-03_78a208538e82a0ff3908a6da92ee29ae_elex_glassworm_remcos_stop_tobfy.exe
Resource
win10v2004-20260513-en
4 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-08-03_78a208538e82a0ff3908a6da92ee29ae_elex_glassworm_remcos_stop_tobfy.exe
Resource
win11ltsc2024-20260709-en
4 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-08-03_78a208538e82a0ff3908a6da92ee29ae_elex_glassworm_remcos_stop_tobfy
- Size 10.5MB
- SHA256 189a50ed4062f06ae3c217af6ce570c8865e745e075316b6e5188d2d945e3fa7
- MD5 78a208538e82a0ff3908a6da92ee29ae
- SHA1 5b6deef1780373b6d0c4f874b8e0c8fff5193f03
- SHA512 a1fe2b37a03955440b2be3ce5e7ae6765b2cc3e5404c73f6331641d3a2135e13e5fe3f9e1bfb03fb494fcc02c6601f593f554f69ab9ce4f88e8342c9ddf92506
- SSDEEP 98304:+zuydx/MH3D8GynF9S7dCcz31dI3tarxWpYF2Sc694X0KsDDRcbrk:+xUXD89FaPprxEYTcO4qDDm/k
- TLSH T157B69E02F7E540A4E4E72AB0987B76259A3ABE0A47F4C1FF96547D0EAE327C15870353
- MD5 SHA1 SHA512 SSDEEP TLSH
Score5/10-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.