General
- Target 2026-08-05_ab672db5dd86e0127571beedd2fc26fe_elex_glassworm_remcos_smoke-loader_stealc_stop_tofsee
- Size 823KB
- Sample260805-sy2njsvydz
- SHA256 86272e24610e5bc2266a1478e0e19bd7b386b388646fbaabb50954487c6700e8
- MD5 ab672db5dd86e0127571beedd2fc26fe
- SHA1 9fad61f6a43b2b19dd1f7dd442d9297438c4fa17
- SHA512 37ad7f6ce63b95333185b743749334db7b2469c44f7a84748a4dd027219cf854754b16525e2e99f59c47a65c6d15ef81155502265a620807a1170f7b69e39e51
- SSDEEP 6144:bwynAtMrOVRkidy9yIGWlUi/vQiGQJUEj3PfcKrKywglL0DWnx4vp6d:bwKfOVRo9yRY6P07dGyJlOh6d
- TLSH T10405E71172F89425F8B36F344DBA86A4DA39BC22AE35C68F7648374D2F317818935727
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
6/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-08-05_ab672db5dd86e0127571beedd2fc26fe_elex_glassworm_remcos_smoke-loader_stealc_stop_tofsee.exe
Resource
win10v2004-20260513-en
8 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-08-05_ab672db5dd86e0127571beedd2fc26fe_elex_glassworm_remcos_smoke-loader_stealc_stop_tofsee.exe
Resource
win11ltsc2024-20260709-en
8 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-08-05_ab672db5dd86e0127571beedd2fc26fe_elex_glassworm_remcos_smoke-loader_stealc_stop_tofsee
- Size 823KB
- SHA256 86272e24610e5bc2266a1478e0e19bd7b386b388646fbaabb50954487c6700e8
- MD5 ab672db5dd86e0127571beedd2fc26fe
- SHA1 9fad61f6a43b2b19dd1f7dd442d9297438c4fa17
- SHA512 37ad7f6ce63b95333185b743749334db7b2469c44f7a84748a4dd027219cf854754b16525e2e99f59c47a65c6d15ef81155502265a620807a1170f7b69e39e51
- SSDEEP 6144:bwynAtMrOVRkidy9yIGWlUi/vQiGQJUEj3PfcKrKywglL0DWnx4vp6d:bwKfOVRo9yRY6P07dGyJlOh6d
- TLSH T10405E71172F89425F8B36F344DBA86A4DA39BC22AE35C68F7648374D2F317818935727
- MD5 SHA1 SHA512 SSDEEP TLSH
Score6/10-
Adds Run key to start application
-
Checks installed software on the system
Looks up Uninstall key entries in the registry to enumerate software on the system.
-
Drops file in System32 directory