General
- Target 2026-08-08_0e715f3167c9cded619ca53bd171b387_elex_glassworm_redline-stealer_remcos_smoke-loader_stealc_stop_swisyn
- Size 4.3MB
- Sample260808-frq71styhw
- SHA256 3b16bb10e0106274f824d5af8eec17c78ff29693697f250c860283e01a6e8ce2
- MD5 0e715f3167c9cded619ca53bd171b387
- SHA1 b732bfe07d769c4fb821bc3f2780404093f17f12
- SHA512 ede0f1467d613ab910c81456e6aba9d4d383d27ee1bcfd3ca2d4ca9cf82dcc53c6ea6434bbb03f63b1856374a4757b77a6e157c5b21d62709444c5e581bab0b2
- SSDEEP 98304:hnq6w8UbBNdEJRDq49mdrIdLqQzbcbvbdJwzbcbP8sV8:hn080BNdkRDq/rIW8
- TLSH T1EA26AE41BADAA066F84526B460E66BB9EB390B145338D4C7FFF439505D30EE0AD372C6
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
10/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-08-08_0e715f3167c9cded619ca53bd171b387_elex_glassworm_redline-stealer_remcos_smoke-loader_stealc_stop_swisyn.exe
Resource
win10v2004-20260513-en
12 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-08-08_0e715f3167c9cded619ca53bd171b387_elex_glassworm_redline-stealer_remcos_smoke-loader_stealc_stop_swisyn.exe
Resource
win11ltsc2024-20260709-en
12 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-08-08_0e715f3167c9cded619ca53bd171b387_elex_glassworm_redline-stealer_remcos_smoke-loader_stealc_stop_swisyn
- Size 4.3MB
- SHA256 3b16bb10e0106274f824d5af8eec17c78ff29693697f250c860283e01a6e8ce2
- MD5 0e715f3167c9cded619ca53bd171b387
- SHA1 b732bfe07d769c4fb821bc3f2780404093f17f12
- SHA512 ede0f1467d613ab910c81456e6aba9d4d383d27ee1bcfd3ca2d4ca9cf82dcc53c6ea6434bbb03f63b1856374a4757b77a6e157c5b21d62709444c5e581bab0b2
- SSDEEP 98304:hnq6w8UbBNdEJRDq49mdrIdLqQzbcbvbdJwzbcbP8sV8:hn080BNdkRDq/rIW8
- TLSH T1EA26AE41BADAA066F84526B460E66BB9EB390B145338D4C7FFF439505D30EE0AD372C6
- MD5 SHA1 SHA512 SSDEEP TLSH
Score10/10-
Modifies visibility of hidden/system files in Explorer
-
Executes dropped EXE
-
Adds Run key to start application
-
Drops file in System32 directory
MITRE ATT&CK Enterprise v16
Privilege Escalation
Boot or Logon Autostart Execution
1Registry Run Keys / Startup Folder
1Defense Evasion
Hide Artifacts
1Hidden Files and Directories
1Modify Registry
2