General
- Target 2026-08-05_f914e150098a1c58081c4c34ea445b27_elex_glassworm_remcos_smoke-loader_stealc_stop_tofsee
- Size 1.9MB
- Sample260805-vkrmja1fra
- SHA256 54c6cd225e9318b97d336708115440a7cfd35eb0af1cca287f3221386462ed20
- MD5 f914e150098a1c58081c4c34ea445b27
- SHA1 e2b08e65255751e8ac56fa0a247a9e52cfe41a29
- SHA512 e25756b68ea2d96fa836ca7cd0535ae26f8f203d94bc6ff1be0952d282434cf240bae8f3a52def3bc3cdb28ff393b72caa5ce28a3012a376c7541f2d4f400d9b
- SSDEEP 49152:W8Y1JzuzT4O8b8ITDnljF9pKs3P5x2L5H4u:TszT9pKs3P5x2L5X
- TLSH T15395086173E48511F1B3BF30597A6E662A3ABC625E75828F32583B4E2F31750DE20736
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
6/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-08-05_f914e150098a1c58081c4c34ea445b27_elex_glassworm_remcos_smoke-loader_stealc_stop_tofsee.exe
Resource
win10v2004-20260513-en
8 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-08-05_f914e150098a1c58081c4c34ea445b27_elex_glassworm_remcos_smoke-loader_stealc_stop_tofsee.exe
Resource
win11ltsc2024-20260710-en
8 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-08-05_f914e150098a1c58081c4c34ea445b27_elex_glassworm_remcos_smoke-loader_stealc_stop_tofsee
- Size 1.9MB
- SHA256 54c6cd225e9318b97d336708115440a7cfd35eb0af1cca287f3221386462ed20
- MD5 f914e150098a1c58081c4c34ea445b27
- SHA1 e2b08e65255751e8ac56fa0a247a9e52cfe41a29
- SHA512 e25756b68ea2d96fa836ca7cd0535ae26f8f203d94bc6ff1be0952d282434cf240bae8f3a52def3bc3cdb28ff393b72caa5ce28a3012a376c7541f2d4f400d9b
- SSDEEP 49152:W8Y1JzuzT4O8b8ITDnljF9pKs3P5x2L5H4u:TszT9pKs3P5x2L5X
- TLSH T15395086173E48511F1B3BF30597A6E662A3ABC625E75828F32583B4E2F31750DE20736
- MD5 SHA1 SHA512 SSDEEP TLSH
Score6/10-
Adds Run key to start application
-
Checks installed software on the system
Looks up Uninstall key entries in the registry to enumerate software on the system.
-
Drops file in System32 directory