General
- Target 2026-08-08_f04d3d9ba07107961cedd2bb8d559bfd_elex_glassworm_remcos_smoke-loader_stealc_stop_tofsee
- Size 3.0MB
- Sample260808-fcdclsbg62
- SHA256 263b456c36b33899b671473290a8e21c301510d74f43b9a30a05e717fcca6560
- MD5 f04d3d9ba07107961cedd2bb8d559bfd
- SHA1 7bb0e9981a43b690c18cb910bfe6ede870a4d430
- SHA512 44360a84ff00aa1688dd30714e996a06f67c810f010c598e54c0a400c493306e434405efe6778f7d60fd91702af2bec02514712ed378e510262502c80bddba1d
- SSDEEP 24576:0xWVeyRYN4s2hzntVIJqQPe0bQBEUOnXFAqVfxe10FgFWWNW:08YNzuzntVxQPeuQBEUOnXFAqVfx8rNW
- TLSH T1F7E5B2C37EE0B513E0A2CE303976A57D55277C6E9E62828F314FF31E5B366809A25712
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
6/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-08-08_f04d3d9ba07107961cedd2bb8d559bfd_elex_glassworm_remcos_smoke-loader_stealc_stop_tofsee.exe
Resource
win10v2004-20260513-en
8 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-08-08_f04d3d9ba07107961cedd2bb8d559bfd_elex_glassworm_remcos_smoke-loader_stealc_stop_tofsee.exe
Resource
win11ltsc2024-20260709-en
8 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-08-08_f04d3d9ba07107961cedd2bb8d559bfd_elex_glassworm_remcos_smoke-loader_stealc_stop_tofsee
- Size 3.0MB
- SHA256 263b456c36b33899b671473290a8e21c301510d74f43b9a30a05e717fcca6560
- MD5 f04d3d9ba07107961cedd2bb8d559bfd
- SHA1 7bb0e9981a43b690c18cb910bfe6ede870a4d430
- SHA512 44360a84ff00aa1688dd30714e996a06f67c810f010c598e54c0a400c493306e434405efe6778f7d60fd91702af2bec02514712ed378e510262502c80bddba1d
- SSDEEP 24576:0xWVeyRYN4s2hzntVIJqQPe0bQBEUOnXFAqVfxe10FgFWWNW:08YNzuzntVxQPeuQBEUOnXFAqVfx8rNW
- TLSH T1F7E5B2C37EE0B513E0A2CE303976A57D55277C6E9E62828F314FF31E5B366809A25712
- MD5 SHA1 SHA512 SSDEEP TLSH
Score6/10-
Adds Run key to start application
-
Checks installed software on the system
Looks up Uninstall key entries in the registry to enumerate software on the system.
-
Drops file in System32 directory