General
- Target 2026-08-08_9bd91286030a54af1c6cd581bc678d7a_elex_glassworm_remcos_smoke-loader_stealc_stop_tofsee
- Size 1.0MB
- Sample260809-af59xa1sa1
- SHA256 f877ad33178d11cf26bfa3aa30f46747cd990cfecef5e678f66aa64b763724f0
- MD5 9bd91286030a54af1c6cd581bc678d7a
- SHA1 a862a631084c2cd76e184682506718c83cb80601
- SHA512 40cee6401adfe9df63cd6a86dfd08e55aaba31681f2c56d9958f811542c397b3ad9685bc018cfa45c433695207005918855df70bee6ed5f08de89afed35719a9
- SSDEEP 12288:UwKfOVRo9yRY+PLm64O8b8ITDnlr0rYkt:UxWVeyRYcLm64O8b8ITDnlwxt
- TLSH T17B35E922F2D4C010F6B73F30497A8AA0EA36BC516AB4868F765C3B1D5F717A1DD2531A
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
6/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-08-08_9bd91286030a54af1c6cd581bc678d7a_elex_glassworm_remcos_smoke-loader_stealc_stop_tofsee.exe
Resource
win10v2004-20260513-en
8 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-08-08_9bd91286030a54af1c6cd581bc678d7a_elex_glassworm_remcos_smoke-loader_stealc_stop_tofsee.exe
Resource
win11ltsc2024-20260709-en
8 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-08-08_9bd91286030a54af1c6cd581bc678d7a_elex_glassworm_remcos_smoke-loader_stealc_stop_tofsee
- Size 1.0MB
- SHA256 f877ad33178d11cf26bfa3aa30f46747cd990cfecef5e678f66aa64b763724f0
- MD5 9bd91286030a54af1c6cd581bc678d7a
- SHA1 a862a631084c2cd76e184682506718c83cb80601
- SHA512 40cee6401adfe9df63cd6a86dfd08e55aaba31681f2c56d9958f811542c397b3ad9685bc018cfa45c433695207005918855df70bee6ed5f08de89afed35719a9
- SSDEEP 12288:UwKfOVRo9yRY+PLm64O8b8ITDnlr0rYkt:UxWVeyRYcLm64O8b8ITDnlwxt
- TLSH T17B35E922F2D4C010F6B73F30497A8AA0EA36BC516AB4868F765C3B1D5F717A1DD2531A
- MD5 SHA1 SHA512 SSDEEP TLSH
Score6/10-
Adds Run key to start application
-
Checks installed software on the system
Looks up Uninstall key entries in the registry to enumerate software on the system.
-
Drops file in System32 directory