General
- Target 2026-08-05_353c37dad316e8d5e5a11fca71c3ed24_elex_glassworm_remcos_smoke-loader_stealc_stop_tofsee
- Size 1.7MB
- Sample260805-xh7bbay1ex
- SHA256 efb5f57e190b8a1604fd628232dcc31fe3cb37a3a8276319c99bb5f8cb65d485
- MD5 353c37dad316e8d5e5a11fca71c3ed24
- SHA1 f303da393e0f8e9295eefe032373b6d6e0566fa2
- SHA512 c9fdafd39af5b9ba96e8f77e2df3132a7a4b16c8a92f02ddca5a567915bf0f6dd86b6001e0263c7ae44aa7b5e8b39d9d99a02b1075e88b2d3abecffc535f612a
- SSDEEP 24576:yxWVeyRYs4s2hzHz4O8b8ITDnljFE5H4I4:y8YszuzT4O8b8ITDnljFE5H4n
- TLSH T1C285E76173E48511F1F3BF30597A6A662A3ABC526E75828F36483B4E6F31750DE20732
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
6/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-08-05_353c37dad316e8d5e5a11fca71c3ed24_elex_glassworm_remcos_smoke-loader_stealc_stop_tofsee.exe
Resource
win10v2004-20260513-en
8 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-08-05_353c37dad316e8d5e5a11fca71c3ed24_elex_glassworm_remcos_smoke-loader_stealc_stop_tofsee.exe
Resource
win11ltsc2024-20260709-en
8 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-08-05_353c37dad316e8d5e5a11fca71c3ed24_elex_glassworm_remcos_smoke-loader_stealc_stop_tofsee
- Size 1.7MB
- SHA256 efb5f57e190b8a1604fd628232dcc31fe3cb37a3a8276319c99bb5f8cb65d485
- MD5 353c37dad316e8d5e5a11fca71c3ed24
- SHA1 f303da393e0f8e9295eefe032373b6d6e0566fa2
- SHA512 c9fdafd39af5b9ba96e8f77e2df3132a7a4b16c8a92f02ddca5a567915bf0f6dd86b6001e0263c7ae44aa7b5e8b39d9d99a02b1075e88b2d3abecffc535f612a
- SSDEEP 24576:yxWVeyRYs4s2hzHz4O8b8ITDnljFE5H4I4:y8YszuzT4O8b8ITDnljFE5H4n
- TLSH T1C285E76173E48511F1F3BF30597A6A662A3ABC526E75828F36483B4E6F31750DE20732
- MD5 SHA1 SHA512 SSDEEP TLSH
Score6/10-
Adds Run key to start application
-
Checks installed software on the system
Looks up Uninstall key entries in the registry to enumerate software on the system.
-
Drops file in System32 directory