General
- Target 2026-08-05_05f606d9fc91bc8e89aa37894e4206fb_elex_glassworm_remcos_smoke-loader_stealc_stop_tofsee
- Size 13.1MB
- Sample260805-x297badf47
- SHA256 620a868c1ecd9f51e3d61408cf7f2777f33fe82c579cbe45ac71ba2b60dc6a4a
- MD5 05f606d9fc91bc8e89aa37894e4206fb
- SHA1 585c11de9193a36223d0d327b0709ebd887cec2e
- SHA512 a0a2b03286d3ac969e677aad96b50cce2b8554162827b7704e2372c6055dc20b0d97f961b5caaee4471751ac0baf09f0bbab46cf465d96e4447f95bdbad41807
- SSDEEP 196608:s305fBJxdSZB0hGqdPofKsIkzHLqj2L3FCGRbki2c:a05fBVSZBqGqlDgcowGR/
- TLSH T145D6CF12A3F90255F1F36F716AB55240DF36BD65AB32C31F2988301E2972B90DD62B63
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
6/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-08-05_05f606d9fc91bc8e89aa37894e4206fb_elex_glassworm_remcos_smoke-loader_stealc_stop_tofsee.exe
Resource
win10v2004-20260513-en
8 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-08-05_05f606d9fc91bc8e89aa37894e4206fb_elex_glassworm_remcos_smoke-loader_stealc_stop_tofsee.exe
Resource
win11ltsc2024-20260710-en
8 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-08-05_05f606d9fc91bc8e89aa37894e4206fb_elex_glassworm_remcos_smoke-loader_stealc_stop_tofsee
- Size 13.1MB
- SHA256 620a868c1ecd9f51e3d61408cf7f2777f33fe82c579cbe45ac71ba2b60dc6a4a
- MD5 05f606d9fc91bc8e89aa37894e4206fb
- SHA1 585c11de9193a36223d0d327b0709ebd887cec2e
- SHA512 a0a2b03286d3ac969e677aad96b50cce2b8554162827b7704e2372c6055dc20b0d97f961b5caaee4471751ac0baf09f0bbab46cf465d96e4447f95bdbad41807
- SSDEEP 196608:s305fBJxdSZB0hGqdPofKsIkzHLqj2L3FCGRbki2c:a05fBVSZBqGqlDgcowGR/
- TLSH T145D6CF12A3F90255F1F36F716AB55240DF36BD65AB32C31F2988301E2972B90DD62B63
- MD5 SHA1 SHA512 SSDEEP TLSH
Score6/10-
Adds Run key to start application
-
Checks installed software on the system
Looks up Uninstall key entries in the registry to enumerate software on the system.
-
Drops file in System32 directory