General
- Target 2026-08-05_8b2d041dd110e25a008ca21f18f8c1b1_elex_glassworm_remcos_smoke-loader_stealc_stop_tofsee
- Size 1.5MB
- Sample260805-ggvm5abj7t
- SHA256 c3154d5b446c42ea96382a6ac50aeafa455873066c00207dbc3070c359b946d3
- MD5 8b2d041dd110e25a008ca21f18f8c1b1
- SHA1 71be585c458e3caf67870ba8d639d8f8f431295a
- SHA512 8a445927117ea1345450296fb34b5605e39ca3b632a825c8d42314fb3515123f7a1f5ebb29a931b40af70b8cc57da9ab68d05bf473415681bd7f228b372cb137
- SSDEEP 24576:4xWVeyRYMDs4s2hzhz4O8b8ITDnljFQkj+5LZv:48YMozuzB4O8b8ITDnljFQkj+5N
- TLSH T11075A361A3F98515F5F73B305DB64AA02A26BC52AE79C34F32483B1E6F71A50DD20723
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
6/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-08-05_8b2d041dd110e25a008ca21f18f8c1b1_elex_glassworm_remcos_smoke-loader_stealc_stop_tofsee.exe
Resource
win10v2004-20260513-en
8 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-08-05_8b2d041dd110e25a008ca21f18f8c1b1_elex_glassworm_remcos_smoke-loader_stealc_stop_tofsee.exe
Resource
win11ltsc2024-20260709-en
8 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-08-05_8b2d041dd110e25a008ca21f18f8c1b1_elex_glassworm_remcos_smoke-loader_stealc_stop_tofsee
- Size 1.5MB
- SHA256 c3154d5b446c42ea96382a6ac50aeafa455873066c00207dbc3070c359b946d3
- MD5 8b2d041dd110e25a008ca21f18f8c1b1
- SHA1 71be585c458e3caf67870ba8d639d8f8f431295a
- SHA512 8a445927117ea1345450296fb34b5605e39ca3b632a825c8d42314fb3515123f7a1f5ebb29a931b40af70b8cc57da9ab68d05bf473415681bd7f228b372cb137
- SSDEEP 24576:4xWVeyRYMDs4s2hzhz4O8b8ITDnljFQkj+5LZv:48YMozuzB4O8b8ITDnljFQkj+5N
- TLSH T11075A361A3F98515F5F73B305DB64AA02A26BC52AE79C34F32483B1E6F71A50DD20723
- MD5 SHA1 SHA512 SSDEEP TLSH
Score6/10-
Adds Run key to start application
-
Checks installed software on the system
Looks up Uninstall key entries in the registry to enumerate software on the system.
-
Drops file in System32 directory