General
- Target 2026-08-05_e22462bd9b1d31b9a5288fb5fe37b056_elex_glassworm_remcos_smoke-loader_stealc_stop_tofsee
- Size 12.0MB
- Sample260805-vrydnaxvdv
- SHA256 d5bd19f6a6306f04e811f965342ef297e76034f71941852be4b61eef40621027
- MD5 e22462bd9b1d31b9a5288fb5fe37b056
- SHA1 8091b8f9501ae6f3802273daf0e9593517b5b758
- SHA512 fd30e5926d8d78aa35444f2787af53fb644a55b49845aa7f72a550c1c45bd6101d6887e03c589dfd8ff5b4dac2453fbaa3daa4e25ca90a61b538aa0db3037a87
- SSDEEP 196608:PZUI6J5fHxdSZB0hGqdPofKsIkzHLqj2L3FCGRbki26:iIS5fvSZBqGqlDgcowGRB
- TLSH T17CC60103FBED4221E0A322719D7696955B21BC6AB73047AF704C710DEBB1B818677B63
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
6/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-08-05_e22462bd9b1d31b9a5288fb5fe37b056_elex_glassworm_remcos_smoke-loader_stealc_stop_tofsee.exe
Resource
win10v2004-20260513-en
8 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-08-05_e22462bd9b1d31b9a5288fb5fe37b056_elex_glassworm_remcos_smoke-loader_stealc_stop_tofsee.exe
Resource
win11ltsc2024-20260709-en
8 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-08-05_e22462bd9b1d31b9a5288fb5fe37b056_elex_glassworm_remcos_smoke-loader_stealc_stop_tofsee
- Size 12.0MB
- SHA256 d5bd19f6a6306f04e811f965342ef297e76034f71941852be4b61eef40621027
- MD5 e22462bd9b1d31b9a5288fb5fe37b056
- SHA1 8091b8f9501ae6f3802273daf0e9593517b5b758
- SHA512 fd30e5926d8d78aa35444f2787af53fb644a55b49845aa7f72a550c1c45bd6101d6887e03c589dfd8ff5b4dac2453fbaa3daa4e25ca90a61b538aa0db3037a87
- SSDEEP 196608:PZUI6J5fHxdSZB0hGqdPofKsIkzHLqj2L3FCGRbki26:iIS5fvSZBqGqlDgcowGRB
- TLSH T17CC60103FBED4221E0A322719D7696955B21BC6AB73047AF704C710DEBB1B818677B63
- MD5 SHA1 SHA512 SSDEEP TLSH
Score6/10-
Adds Run key to start application
-
Checks installed software on the system
Looks up Uninstall key entries in the registry to enumerate software on the system.
-
Drops file in System32 directory