General
- Target 2026-08-05_8657331b75fe6cfb2efc98e8910f3488_elex_glassworm_remcos_smoke-loader_stealc_stop_tofsee
- Size 2.0MB
- Sample260805-gh7dbawvgw
- SHA256 8753d9622fc09cb16c7bf8c0c0cdc67326352c31a638fe597eaea02215a01eeb
- MD5 8657331b75fe6cfb2efc98e8910f3488
- SHA1 965f9b9dd512d315965805464892e25a94a669cb
- SHA512 b57452a11b921f3aee2392985900ac198c2742c1b5119828e57ef8c24f085ae1a8bc1955ddaef004ff33b5480538c980b00635d717f619d39ebf9d4a862a3a32
- SSDEEP 24576:kxWVeyRYPwOB+4O8b8ITDnl4Fnru3Wz6z:k8YlM4O8b8ITDnl4FnrhzI
- TLSH T1A195846173F89129F5F26B309EF68BA56A27BD515E35C60F3644374E1A31AA0DE20333
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
6/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-08-05_8657331b75fe6cfb2efc98e8910f3488_elex_glassworm_remcos_smoke-loader_stealc_stop_tofsee.exe
Resource
win10v2004-20260513-en
8 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-08-05_8657331b75fe6cfb2efc98e8910f3488_elex_glassworm_remcos_smoke-loader_stealc_stop_tofsee.exe
Resource
win11ltsc2024-20260709-en
8 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-08-05_8657331b75fe6cfb2efc98e8910f3488_elex_glassworm_remcos_smoke-loader_stealc_stop_tofsee
- Size 2.0MB
- SHA256 8753d9622fc09cb16c7bf8c0c0cdc67326352c31a638fe597eaea02215a01eeb
- MD5 8657331b75fe6cfb2efc98e8910f3488
- SHA1 965f9b9dd512d315965805464892e25a94a669cb
- SHA512 b57452a11b921f3aee2392985900ac198c2742c1b5119828e57ef8c24f085ae1a8bc1955ddaef004ff33b5480538c980b00635d717f619d39ebf9d4a862a3a32
- SSDEEP 24576:kxWVeyRYPwOB+4O8b8ITDnl4Fnru3Wz6z:k8YlM4O8b8ITDnl4FnrhzI
- TLSH T1A195846173F89129F5F26B309EF68BA56A27BD515E35C60F3644374E1A31AA0DE20333
- MD5 SHA1 SHA512 SSDEEP TLSH
Score6/10-
Adds Run key to start application
-
Checks installed software on the system
Looks up Uninstall key entries in the registry to enumerate software on the system.
-
Drops file in System32 directory