General
- Target 2026-08-07_84d8785d78bc774a317bb551c3d68ac7_elex_glassworm_remcos_smoke-loader_stealc_stop_tofsee
- Size 1.5MB
- Sample260807-fsbtqagk9y
- SHA256 faea4493ba8034ff7ae116b62e872aab941ef3a899e936e6a058cc280f8e2eab
- MD5 84d8785d78bc774a317bb551c3d68ac7
- SHA1 36fa52ad06b634a74de6adca2bc3879346e1ff13
- SHA512 ea40d2351ed03de2ff0022faf2fea0663c2de1fcca0e4f68ad9802d382fe65bfb159ce73a35733942446ccc0b6333e76fff3751d07cdd61a704f091263e0bebf
- SSDEEP 6144:JwynAtMrOVRkidy9yIGWlUi0xekAXODQJUEnj7HmGLxDtnx4bYcOzrBCqtwpaGUh:JwKfOVRo9yRYuD0/GGakzNUO
- TLSH T14B65F9017AD8D425F2F317309D7A82B426257D165FA4CA8F734ABB8F7EF1A408E61316
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
6/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-08-07_84d8785d78bc774a317bb551c3d68ac7_elex_glassworm_remcos_smoke-loader_stealc_stop_tofsee.exe
Resource
win10v2004-20260513-en
8 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-08-07_84d8785d78bc774a317bb551c3d68ac7_elex_glassworm_remcos_smoke-loader_stealc_stop_tofsee.exe
Resource
win11ltsc2024-20260709-en
8 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-08-07_84d8785d78bc774a317bb551c3d68ac7_elex_glassworm_remcos_smoke-loader_stealc_stop_tofsee
- Size 1.5MB
- SHA256 faea4493ba8034ff7ae116b62e872aab941ef3a899e936e6a058cc280f8e2eab
- MD5 84d8785d78bc774a317bb551c3d68ac7
- SHA1 36fa52ad06b634a74de6adca2bc3879346e1ff13
- SHA512 ea40d2351ed03de2ff0022faf2fea0663c2de1fcca0e4f68ad9802d382fe65bfb159ce73a35733942446ccc0b6333e76fff3751d07cdd61a704f091263e0bebf
- SSDEEP 6144:JwynAtMrOVRkidy9yIGWlUi0xekAXODQJUEnj7HmGLxDtnx4bYcOzrBCqtwpaGUh:JwKfOVRo9yRYuD0/GGakzNUO
- TLSH T14B65F9017AD8D425F2F317309D7A82B426257D165FA4CA8F734ABB8F7EF1A408E61316
- MD5 SHA1 SHA512 SSDEEP TLSH
Score6/10-
Adds Run key to start application
-
Checks installed software on the system
Looks up Uninstall key entries in the registry to enumerate software on the system.
-
Drops file in System32 directory