General
- Target 2026-08-05_175a8ff5988083d58ecba41938506aac_elex_glassworm_remcos_smoke-loader_stealc_stop_tofsee
- Size 2.2MB
- Sample260805-1j76saeb82
- SHA256 6bcc6103ae02a0263058455e4c662d48ecc0b4ae661e5bb499b5f40a2b407d39
- MD5 175a8ff5988083d58ecba41938506aac
- SHA1 a5e2edcc1d386371a825fbbdaee802d422cbaa7b
- SHA512 d046be4868802caead0aee7ac057abc18d18293312468c307e587224a5fb360a2a63e73a5e0cc870019cd26e3e8a54cccaeed54766fd73dff50de0b4a93d30e6
- SSDEEP 49152:C8YsuzuzT4O8b8ITDnljFaoNKs3P5x2oKs3P5x2r5H4w:XfuzTaoNKs3P5x2oKs3P5x2r5N
- TLSH T13FB5195173E48511F5B3BF30687A6E661A3ABD529E79828F32583B4D2F30750DE2073A
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
6/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-08-05_175a8ff5988083d58ecba41938506aac_elex_glassworm_remcos_smoke-loader_stealc_stop_tofsee.exe
Resource
win10v2004-20260513-en
8 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-08-05_175a8ff5988083d58ecba41938506aac_elex_glassworm_remcos_smoke-loader_stealc_stop_tofsee.exe
Resource
win11ltsc2024-20260709-en
8 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-08-05_175a8ff5988083d58ecba41938506aac_elex_glassworm_remcos_smoke-loader_stealc_stop_tofsee
- Size 2.2MB
- SHA256 6bcc6103ae02a0263058455e4c662d48ecc0b4ae661e5bb499b5f40a2b407d39
- MD5 175a8ff5988083d58ecba41938506aac
- SHA1 a5e2edcc1d386371a825fbbdaee802d422cbaa7b
- SHA512 d046be4868802caead0aee7ac057abc18d18293312468c307e587224a5fb360a2a63e73a5e0cc870019cd26e3e8a54cccaeed54766fd73dff50de0b4a93d30e6
- SSDEEP 49152:C8YsuzuzT4O8b8ITDnljFaoNKs3P5x2oKs3P5x2r5H4w:XfuzTaoNKs3P5x2oKs3P5x2r5N
- TLSH T13FB5195173E48511F5B3BF30687A6E661A3ABD529E79828F32583B4D2F30750DE2073A
- MD5 SHA1 SHA512 SSDEEP TLSH
Score6/10-
Adds Run key to start application
-
Checks installed software on the system
Looks up Uninstall key entries in the registry to enumerate software on the system.
-
Drops file in System32 directory