General
- Target 2026-08-05_eef4bb2aa91f8646f0847fec74910440_elex_glassworm_remcos_smoke-loader_stealc_stop_tofsee
- Size 1.8MB
- Sample260805-vnwewscf72
- SHA256 4186d53c037de5a0ef41f652efceb1377fb4f2fb1db79d1fcaf3120a9d4a5f79
- MD5 eef4bb2aa91f8646f0847fec74910440
- SHA1 e6f49b7f159edfa22978e086a4b7cce85d9105d0
- SHA512 11139d2392c621b67349139a0330392b9c6f390ea2a14fa9e8d6b955de2ab2def14b987e8f5beb9db70875c62d3da1c7dc343bdf68b25a1c9cdf5354d5ef7dcb
- SSDEEP 24576:mxWVeyRYbsLmnl14O8b8ITDnlbSt7riih88ZOORwEw3A3HI3H73H/n73K3H23EbL:m8Y34O8b8ITDnl+t7riih88ZOOP5
- TLSH T13695A436F545C011D47E2D30CA6A89F8E53BBC01EA9492A732BC3F1E7EB13D1AC29655
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
8/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-08-05_eef4bb2aa91f8646f0847fec74910440_elex_glassworm_remcos_smoke-loader_stealc_stop_tofsee.exe
Resource
win10v2004-20260513-en
9 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-08-05_eef4bb2aa91f8646f0847fec74910440_elex_glassworm_remcos_smoke-loader_stealc_stop_tofsee.exe
Resource
win11ltsc2024-20260709-en
8 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-08-05_eef4bb2aa91f8646f0847fec74910440_elex_glassworm_remcos_smoke-loader_stealc_stop_tofsee
- Size 1.8MB
- SHA256 4186d53c037de5a0ef41f652efceb1377fb4f2fb1db79d1fcaf3120a9d4a5f79
- MD5 eef4bb2aa91f8646f0847fec74910440
- SHA1 e6f49b7f159edfa22978e086a4b7cce85d9105d0
- SHA512 11139d2392c621b67349139a0330392b9c6f390ea2a14fa9e8d6b955de2ab2def14b987e8f5beb9db70875c62d3da1c7dc343bdf68b25a1c9cdf5354d5ef7dcb
- SSDEEP 24576:mxWVeyRYbsLmnl14O8b8ITDnlbSt7riih88ZOORwEw3A3HI3H73H/n73K3H23EbL:m8Y34O8b8ITDnl+t7riih88ZOOP5
- TLSH T13695A436F545C011D47E2D30CA6A89F8E53BBC01EA9492A732BC3F1E7EB13D1AC29655
- MD5 SHA1 SHA512 SSDEEP TLSH
Score8/10-
Drops file in Drivers directory
-
Adds Run key to start application
-
Checks installed software on the system
Looks up Uninstall key entries in the registry to enumerate software on the system.
-
Drops file in System32 directory