General
- Target 2026-08-08_8c3460321f7818be1bedf07e4b4e84d6_elex_glassworm_remcos_smoke-loader_stealc_stop_tofsee
- Size 1024KB
- Sample260809-ahcelswhqb
- SHA256 28ccdcc385d29c6685b759da15c139991019ee186985822d2f3916b63ed7739d
- MD5 8c3460321f7818be1bedf07e4b4e84d6
- SHA1 a37f5b8237460ed7eecf311c1197e7bfdc121e73
- SHA512 1400f42ddc43678551e759751021eb9d1f92a12227791bff04ddd3263d7fcf10bb006350beeec68b45d908d721b3060df32338cfa54ec782718e4e405d18a844
- SSDEEP 6144:ewynAtMrOVRkidy9yIGWlUiB1Iv6osfTQJUEEDeR/SHdCzxcxoX3/Di5R/SHdCzx:ewKfOVRo9yRYKv690ED1703/Di0qh4w1
- TLSH T18E255B51BA98C021E4621A34CD6AC2F85665BD62EF2187C77A8C3F0FBF307D1993571A
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
6/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-08-08_8c3460321f7818be1bedf07e4b4e84d6_elex_glassworm_remcos_smoke-loader_stealc_stop_tofsee.exe
Resource
win10v2004-20260513-en
8 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-08-08_8c3460321f7818be1bedf07e4b4e84d6_elex_glassworm_remcos_smoke-loader_stealc_stop_tofsee.exe
Resource
win11ltsc2024-20260709-en
8 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-08-08_8c3460321f7818be1bedf07e4b4e84d6_elex_glassworm_remcos_smoke-loader_stealc_stop_tofsee
- Size 1024KB
- SHA256 28ccdcc385d29c6685b759da15c139991019ee186985822d2f3916b63ed7739d
- MD5 8c3460321f7818be1bedf07e4b4e84d6
- SHA1 a37f5b8237460ed7eecf311c1197e7bfdc121e73
- SHA512 1400f42ddc43678551e759751021eb9d1f92a12227791bff04ddd3263d7fcf10bb006350beeec68b45d908d721b3060df32338cfa54ec782718e4e405d18a844
- SSDEEP 6144:ewynAtMrOVRkidy9yIGWlUiB1Iv6osfTQJUEEDeR/SHdCzxcxoX3/Di5R/SHdCzx:ewKfOVRo9yRYKv690ED1703/Di0qh4w1
- TLSH T18E255B51BA98C021E4621A34CD6AC2F85665BD62EF2187C77A8C3F0FBF307D1993571A
- MD5 SHA1 SHA512 SSDEEP TLSH
Score6/10-
Adds Run key to start application
-
Checks installed software on the system
Looks up Uninstall key entries in the registry to enumerate software on the system.
-
Drops file in System32 directory