General
- Target 2026-08-05_4dc2113c26918329bdb322c1aa3edbb7_elex_glassworm_remcos_smoke-loader_stealc_stop_tofsee
- Size 10.7MB
- Sample260805-htm99afd43
- SHA256 2655b282a76d56b6556cd27f4fec0a69e29ad7718b28dd1b8d6c38ff034a7b8e
- MD5 4dc2113c26918329bdb322c1aa3edbb7
- SHA1 db1a55d1e3bb59d8af0b29e215a8a8c966c3c10c
- SHA512 711d7c6cdc92bcbed882e185730d4089532cf470f779dc00fa9d396b17bb78ee16029fcaf4fec7a29f48bbb5bf42d5dc6e9bf72b7ebb0ee95a3f7ad97f61c90b
- SSDEEP 196608:nd5fVxdSZB0hGqdPofKsIkzHLqj2L3FCGRbki2u:d5fxSZBqGqlDgcowGRx
- TLSH T1AEB61227E3C44232D1532F3149AB5990FF36BC6962A0575B705CB30C6BB27A1DEB6392
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
6/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-08-05_4dc2113c26918329bdb322c1aa3edbb7_elex_glassworm_remcos_smoke-loader_stealc_stop_tofsee.exe
Resource
win10v2004-20260513-en
8 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-08-05_4dc2113c26918329bdb322c1aa3edbb7_elex_glassworm_remcos_smoke-loader_stealc_stop_tofsee.exe
Resource
win11ltsc2024-20260709-en
8 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-08-05_4dc2113c26918329bdb322c1aa3edbb7_elex_glassworm_remcos_smoke-loader_stealc_stop_tofsee
- Size 10.7MB
- SHA256 2655b282a76d56b6556cd27f4fec0a69e29ad7718b28dd1b8d6c38ff034a7b8e
- MD5 4dc2113c26918329bdb322c1aa3edbb7
- SHA1 db1a55d1e3bb59d8af0b29e215a8a8c966c3c10c
- SHA512 711d7c6cdc92bcbed882e185730d4089532cf470f779dc00fa9d396b17bb78ee16029fcaf4fec7a29f48bbb5bf42d5dc6e9bf72b7ebb0ee95a3f7ad97f61c90b
- SSDEEP 196608:nd5fVxdSZB0hGqdPofKsIkzHLqj2L3FCGRbki2u:d5fxSZBqGqlDgcowGRx
- TLSH T1AEB61227E3C44232D1532F3149AB5990FF36BC6962A0575B705CB30C6BB27A1DEB6392
- MD5 SHA1 SHA512 SSDEEP TLSH
Score6/10-
Adds Run key to start application
-
Checks installed software on the system
Looks up Uninstall key entries in the registry to enumerate software on the system.
-
Drops file in System32 directory