General
- Target 2026-08-06_e8a699d497da9c777ddc3a92a2fa76cc_coinminer_elex_glassworm_remcos_smoke-loader_stealc_stop_tofsee
- Size 1.6MB
- Sample260807-aep7aswzcv
- SHA256 310d16fd3eed860d1365d945ef776b31c89b303bc19915973ec78ee44b989fee
- MD5 e8a699d497da9c777ddc3a92a2fa76cc
- SHA1 859571c4c790bc9535fc5634081bf9f15f399135
- SHA512 c623a4711944582d7fbb560caa93b154c24d9c00d5cf9025b5c9dcee7f4df020ae68c7599abb2ae1de15c9ff2d3c732d5f2fda2a1332708f58d99e6bf171a68d
- SSDEEP 12288:7wKfOVRo9yRYxM7W4O8b8ITDnl/6QeTx5KEZ+VNM:7xWVeyRYxM7W4O8b8ITDnl/OsNM
- TLSH T1D175A90612D8C6DBE1AA2630CC69BBF415523CB9EE61CE5B7D447E06B63179084B373E
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
6/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-08-06_e8a699d497da9c777ddc3a92a2fa76cc_coinminer_elex_glassworm_remcos_smoke-loader_stealc_stop_tofsee.exe
Resource
win10v2004-20260513-en
8 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-08-06_e8a699d497da9c777ddc3a92a2fa76cc_coinminer_elex_glassworm_remcos_smoke-loader_stealc_stop_tofsee.exe
Resource
win11ltsc2024-20260710-en
8 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-08-06_e8a699d497da9c777ddc3a92a2fa76cc_coinminer_elex_glassworm_remcos_smoke-loader_stealc_stop_tofsee
- Size 1.6MB
- SHA256 310d16fd3eed860d1365d945ef776b31c89b303bc19915973ec78ee44b989fee
- MD5 e8a699d497da9c777ddc3a92a2fa76cc
- SHA1 859571c4c790bc9535fc5634081bf9f15f399135
- SHA512 c623a4711944582d7fbb560caa93b154c24d9c00d5cf9025b5c9dcee7f4df020ae68c7599abb2ae1de15c9ff2d3c732d5f2fda2a1332708f58d99e6bf171a68d
- SSDEEP 12288:7wKfOVRo9yRYxM7W4O8b8ITDnl/6QeTx5KEZ+VNM:7xWVeyRYxM7W4O8b8ITDnl/OsNM
- TLSH T1D175A90612D8C6DBE1AA2630CC69BBF415523CB9EE61CE5B7D447E06B63179084B373E
- MD5 SHA1 SHA512 SSDEEP TLSH
Score6/10-
Adds Run key to start application
-
Checks installed software on the system
Looks up Uninstall key entries in the registry to enumerate software on the system.
-
Drops file in System32 directory