General
- Target 2026-08-04_c0e453a70caa51daa3432bc593c6a00a_elex_glassworm_remcos_smoke-loader_stealc_stop_tofsee
- Size 1.1MB
- Sample260804-w1sp7sxcld
- SHA256 48b94b6ed48c9a5fc6df9064e30fd20fae67278e0929267fb3c866490e377c62
- MD5 c0e453a70caa51daa3432bc593c6a00a
- SHA1 2ccb2ba8d9bd63d2082f368accbfadbdce164f84
- SHA512 fc2df984e1dad8c85bd2f85137be1b4f177e39e3e4cb13828ef183b0165f2edc33df8aa852659b72458fb16b3466d0f03ff5005edde22ccc6c240072bbf0936e
- SSDEEP 24576:1xWVeyRY6wdF1+nLZWMHb4O8b8ITDnl2Bf:18Y6zb4O8b8ITDnl2Bf
- TLSH T195455E2162F98929F5F23F314A719F65EA36BC559AB8864E2259331D0F34BB1CD30723
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
6/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-08-04_c0e453a70caa51daa3432bc593c6a00a_elex_glassworm_remcos_smoke-loader_stealc_stop_tofsee.exe
Resource
win10v2004-20260513-en
8 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-08-04_c0e453a70caa51daa3432bc593c6a00a_elex_glassworm_remcos_smoke-loader_stealc_stop_tofsee.exe
Resource
win11ltsc2024-20260709-en
8 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-08-04_c0e453a70caa51daa3432bc593c6a00a_elex_glassworm_remcos_smoke-loader_stealc_stop_tofsee
- Size 1.1MB
- SHA256 48b94b6ed48c9a5fc6df9064e30fd20fae67278e0929267fb3c866490e377c62
- MD5 c0e453a70caa51daa3432bc593c6a00a
- SHA1 2ccb2ba8d9bd63d2082f368accbfadbdce164f84
- SHA512 fc2df984e1dad8c85bd2f85137be1b4f177e39e3e4cb13828ef183b0165f2edc33df8aa852659b72458fb16b3466d0f03ff5005edde22ccc6c240072bbf0936e
- SSDEEP 24576:1xWVeyRY6wdF1+nLZWMHb4O8b8ITDnl2Bf:18Y6zb4O8b8ITDnl2Bf
- TLSH T195455E2162F98929F5F23F314A719F65EA36BC559AB8864E2259331D0F34BB1CD30723
- MD5 SHA1 SHA512 SSDEEP TLSH
Score6/10-
Adds Run key to start application
-
Checks installed software on the system
Looks up Uninstall key entries in the registry to enumerate software on the system.
-
Drops file in System32 directory