General
- Target 2026-08-04_20e9ec7dd07f64cc075e54a942daca9a_elex_glassworm_remcos_smoke-loader_stealc_stop_tofsee
- Size 1.2MB
- Sample260804-tzp7ksdf48
- SHA256 f5aa81b595515c7dd51b64ca07af922a7dbad4829489df265db746124905045c
- MD5 20e9ec7dd07f64cc075e54a942daca9a
- SHA1 834fc874e8c30ad1ff57fe46046b635e46eafcaf
- SHA512 25103cc69131ccecce681069ef6b4106d249c11e2b8d952da03c846b0f0b80bfa57ed8d434a1595f4e8e89f401449162876049475297a8c90dd060a5f876c49b
- SSDEEP 12288:gwKfOVRo9yRYt9h4Lmn4O8b8ITDnlW0FQ+wVfI:gxWVeyRYt9h4Lmn4O8b8ITDnlaDfI
- TLSH T1F8559661E2E48514F1B73F30197A4A61EA3ABC51ADB8D79F32483B0E6F71790DD21722
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
6/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-08-04_20e9ec7dd07f64cc075e54a942daca9a_elex_glassworm_remcos_smoke-loader_stealc_stop_tofsee.exe
Resource
win10v2004-20260513-en
8 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-08-04_20e9ec7dd07f64cc075e54a942daca9a_elex_glassworm_remcos_smoke-loader_stealc_stop_tofsee.exe
Resource
win11ltsc2024-20260709-en
8 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-08-04_20e9ec7dd07f64cc075e54a942daca9a_elex_glassworm_remcos_smoke-loader_stealc_stop_tofsee
- Size 1.2MB
- SHA256 f5aa81b595515c7dd51b64ca07af922a7dbad4829489df265db746124905045c
- MD5 20e9ec7dd07f64cc075e54a942daca9a
- SHA1 834fc874e8c30ad1ff57fe46046b635e46eafcaf
- SHA512 25103cc69131ccecce681069ef6b4106d249c11e2b8d952da03c846b0f0b80bfa57ed8d434a1595f4e8e89f401449162876049475297a8c90dd060a5f876c49b
- SSDEEP 12288:gwKfOVRo9yRYt9h4Lmn4O8b8ITDnlW0FQ+wVfI:gxWVeyRYt9h4Lmn4O8b8ITDnlaDfI
- TLSH T1F8559661E2E48514F1B73F30197A4A61EA3ABC51ADB8D79F32483B0E6F71790DD21722
- MD5 SHA1 SHA512 SSDEEP TLSH
Score6/10-
Adds Run key to start application
-
Checks installed software on the system
Looks up Uninstall key entries in the registry to enumerate software on the system.
-
Drops file in System32 directory