General
- Target 2026-08-05_9c24038c2ce3232f287a7c7bf00e05a0_elex_glassworm_remcos_smoke-loader_stealc_stop_tofsee
- Size 1.3MB
- Sample260805-wf2glsda34
- SHA256 5e06a326c236ee8f82ac75efdd3aaad3e5fc44636969526e7171e55aae0a8b28
- MD5 9c24038c2ce3232f287a7c7bf00e05a0
- SHA1 25e9acd2692df2ad6e8e8c5fd729b9110eff05fb
- SHA512 eab0c334ec4a9374d93a43058f62ce1390de7a65e9b32fc6c5c61b7c698620d519bb7e0d7e64b833079e65c57bbcbe78075d699ff5125e990b2265aa587b3c16
- SSDEEP 12288:xwKfOVRo9yRYOSLLmo4O8b8ITDnlw0MN8Tx5KEZzvbw:xxWVeyRYNLLmo4O8b8ITDnl2Gfw
- TLSH T1EE55F912B2D48114F5B33F304DB94AA4EA36BC516EB9865F328C370E5FB17A0D926727
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
6/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-08-05_9c24038c2ce3232f287a7c7bf00e05a0_elex_glassworm_remcos_smoke-loader_stealc_stop_tofsee.exe
Resource
win10v2004-20260513-en
8 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-08-05_9c24038c2ce3232f287a7c7bf00e05a0_elex_glassworm_remcos_smoke-loader_stealc_stop_tofsee.exe
Resource
win11ltsc2024-20260709-en
8 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-08-05_9c24038c2ce3232f287a7c7bf00e05a0_elex_glassworm_remcos_smoke-loader_stealc_stop_tofsee
- Size 1.3MB
- SHA256 5e06a326c236ee8f82ac75efdd3aaad3e5fc44636969526e7171e55aae0a8b28
- MD5 9c24038c2ce3232f287a7c7bf00e05a0
- SHA1 25e9acd2692df2ad6e8e8c5fd729b9110eff05fb
- SHA512 eab0c334ec4a9374d93a43058f62ce1390de7a65e9b32fc6c5c61b7c698620d519bb7e0d7e64b833079e65c57bbcbe78075d699ff5125e990b2265aa587b3c16
- SSDEEP 12288:xwKfOVRo9yRYOSLLmo4O8b8ITDnlw0MN8Tx5KEZzvbw:xxWVeyRYNLLmo4O8b8ITDnl2Gfw
- TLSH T1EE55F912B2D48114F5B33F304DB94AA4EA36BC516EB9865F328C370E5FB17A0D926727
- MD5 SHA1 SHA512 SSDEEP TLSH
Score6/10-
Adds Run key to start application
-
Checks installed software on the system
Looks up Uninstall key entries in the registry to enumerate software on the system.
-
Drops file in System32 directory