General
- Target 2026-08-08_996cdd4c56939d8adf4d6bcbb1d0bcfc_elex_glassworm_remcos_smoke-loader_stealc_stop_tofsee
- Size 1.8MB
- Sample260809-agdlaawhld
- SHA256 2416292cc5a64ab3647b40f1029619b849ac7376aebc75f31297dd0ef0bac5d4
- MD5 996cdd4c56939d8adf4d6bcbb1d0bcfc
- SHA1 af6d3e00377fda723bf956883a92d2918ef7e8ac
- SHA512 421a61e3f6f23c8a1b63be23c257f1c43fd649d78e4aaed67968b29e7b9f038211d10c3c5c55003e1cef8e4a964904e887293dc1cbe0b7f33b5f4789ab0f6cfa
- SSDEEP 6144:xwynAtMrOVRkidy9yIGWlUibNSoHLhHukAXODQJUE407HmxbyLNDtnx4bYcOzrBm:xwKfOVRo9yRYiCD0xGkmkzNUl
- TLSH T10085A411A7E8D814F2F73B306D7682651635BC56AE78C68F3205BB4F7EB1A44CE21722
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
6/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-08-08_996cdd4c56939d8adf4d6bcbb1d0bcfc_elex_glassworm_remcos_smoke-loader_stealc_stop_tofsee.exe
Resource
win10v2004-20260513-en
8 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-08-08_996cdd4c56939d8adf4d6bcbb1d0bcfc_elex_glassworm_remcos_smoke-loader_stealc_stop_tofsee.exe
Resource
win11ltsc2024-20260709-en
8 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-08-08_996cdd4c56939d8adf4d6bcbb1d0bcfc_elex_glassworm_remcos_smoke-loader_stealc_stop_tofsee
- Size 1.8MB
- SHA256 2416292cc5a64ab3647b40f1029619b849ac7376aebc75f31297dd0ef0bac5d4
- MD5 996cdd4c56939d8adf4d6bcbb1d0bcfc
- SHA1 af6d3e00377fda723bf956883a92d2918ef7e8ac
- SHA512 421a61e3f6f23c8a1b63be23c257f1c43fd649d78e4aaed67968b29e7b9f038211d10c3c5c55003e1cef8e4a964904e887293dc1cbe0b7f33b5f4789ab0f6cfa
- SSDEEP 6144:xwynAtMrOVRkidy9yIGWlUibNSoHLhHukAXODQJUE407HmxbyLNDtnx4bYcOzrBm:xwKfOVRo9yRYiCD0xGkmkzNUl
- TLSH T10085A411A7E8D814F2F73B306D7682651635BC56AE78C68F3205BB4F7EB1A44CE21722
- MD5 SHA1 SHA512 SSDEEP TLSH
Score6/10-
Adds Run key to start application
-
Checks installed software on the system
Looks up Uninstall key entries in the registry to enumerate software on the system.
-
Drops file in System32 directory