General
- Target 2026-08-05_5569ed1657fa8d160c84f23902a96f80_elex_glassworm_remcos_smoke-loader_stealc_stop_tofsee
- Size 1.7MB
- Sample260805-w7h5catdnh
- SHA256 a4f4b11194c7539f72196b8e5ad2c69e67712150afc88a32ad8854dca4061a8f
- MD5 5569ed1657fa8d160c84f23902a96f80
- SHA1 831a53796cf451e533f1a55aab0115513b51b4c8
- SHA512 b490f47d766b2f4939ee8684d738d4553d2ec88a690e824ff648267a624a662254934307185198c1568221a019d109c4572ef9269ea635d18ab96c74ee27f1cb
- SSDEEP 24576:ixWVeyRYDRX4s2hzHz4O8b8ITDnljFE5H47l:i8YdzuzT4O8b8ITDnljFE5H4B
- TLSH T10085E76173E48511F1F3BF30597A6A662A3ABC526E75828F36483B4E6F31750DE20732
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
6/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-08-05_5569ed1657fa8d160c84f23902a96f80_elex_glassworm_remcos_smoke-loader_stealc_stop_tofsee.exe
Resource
win10v2004-20260513-en
8 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-08-05_5569ed1657fa8d160c84f23902a96f80_elex_glassworm_remcos_smoke-loader_stealc_stop_tofsee.exe
Resource
win11ltsc2024-20260709-en
8 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-08-05_5569ed1657fa8d160c84f23902a96f80_elex_glassworm_remcos_smoke-loader_stealc_stop_tofsee
- Size 1.7MB
- SHA256 a4f4b11194c7539f72196b8e5ad2c69e67712150afc88a32ad8854dca4061a8f
- MD5 5569ed1657fa8d160c84f23902a96f80
- SHA1 831a53796cf451e533f1a55aab0115513b51b4c8
- SHA512 b490f47d766b2f4939ee8684d738d4553d2ec88a690e824ff648267a624a662254934307185198c1568221a019d109c4572ef9269ea635d18ab96c74ee27f1cb
- SSDEEP 24576:ixWVeyRYDRX4s2hzHz4O8b8ITDnljFE5H47l:i8YdzuzT4O8b8ITDnljFE5H4B
- TLSH T10085E76173E48511F1F3BF30597A6A662A3ABC526E75828F36483B4E6F31750DE20732
- MD5 SHA1 SHA512 SSDEEP TLSH
Score6/10-
Adds Run key to start application
-
Checks installed software on the system
Looks up Uninstall key entries in the registry to enumerate software on the system.
-
Drops file in System32 directory