General
- Target 2026-08-06_dc11931f46078ed34bc19f05c3a7924b_elex_glassworm_remcos_smoke-loader_stealc_stop_tofsee
- Size 958KB
- Sample260807-agkplacr2y
- SHA256 243ba815c433d1e1a28a65ecc2ee766a409eb21771d763e98807c2c03eea60a4
- MD5 dc11931f46078ed34bc19f05c3a7924b
- SHA1 d855f5c0b2cb3cf17f94c83772cadfa53864ec75
- SHA512 c70efad7fb4bd423dd1948e322d53534f18508296e2c60e4d57cbe5de433188c2465ccde7d92c90cd9039e87719267d60b3a8a4a5f0d5cd54365589a2b1e8769
- SSDEEP 12288:ZwKfOVRo9yRYbEnM7W4O8b8ITDnlOJmuTx5KEZX0H:ZxWVeyRY2M7W4O8b8ITDnlOfEH
- TLSH T1B825C72163E94715F5FB7B3099B44A506A677C616E75C78E32883B0E2B70AA0CD72733
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
6/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-08-06_dc11931f46078ed34bc19f05c3a7924b_elex_glassworm_remcos_smoke-loader_stealc_stop_tofsee.exe
Resource
win10v2004-20260513-en
8 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-08-06_dc11931f46078ed34bc19f05c3a7924b_elex_glassworm_remcos_smoke-loader_stealc_stop_tofsee.exe
Resource
win11ltsc2024-20260710-en
8 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-08-06_dc11931f46078ed34bc19f05c3a7924b_elex_glassworm_remcos_smoke-loader_stealc_stop_tofsee
- Size 958KB
- SHA256 243ba815c433d1e1a28a65ecc2ee766a409eb21771d763e98807c2c03eea60a4
- MD5 dc11931f46078ed34bc19f05c3a7924b
- SHA1 d855f5c0b2cb3cf17f94c83772cadfa53864ec75
- SHA512 c70efad7fb4bd423dd1948e322d53534f18508296e2c60e4d57cbe5de433188c2465ccde7d92c90cd9039e87719267d60b3a8a4a5f0d5cd54365589a2b1e8769
- SSDEEP 12288:ZwKfOVRo9yRYbEnM7W4O8b8ITDnlOJmuTx5KEZX0H:ZxWVeyRY2M7W4O8b8ITDnlOfEH
- TLSH T1B825C72163E94715F5FB7B3099B44A506A677C616E75C78E32883B0E2B70AA0CD72733
- MD5 SHA1 SHA512 SSDEEP TLSH
Score6/10-
Adds Run key to start application
-
Checks installed software on the system
Looks up Uninstall key entries in the registry to enumerate software on the system.
-
Drops file in System32 directory