General
- Target 2026-08-08_884d91f4ebdd9b4986a575c80b4b8d66_elex_glassworm_remcos_smoke-loader_stealc_stop_tofsee
- Size 1.5MB
- Sample260809-ahke8afj3w
- SHA256 b70958e82b731d80235ae2009d710fae2d92dc0af81ada7c494eda3bab29ff9b
- MD5 884d91f4ebdd9b4986a575c80b4b8d66
- SHA1 f60fb3efbe8fd2e0c106e7fbd564234c9a7ba1ab
- SHA512 4b879f82a91923b80e2b42598b61fb1c73996d5d698164ca4a37b8c7a080fd7ffeb82b8c9e2182f4d9ef7d005ea336bcca3844fe95b0c22e70b4ed68984ef9ba
- SSDEEP 49152:p8YkY4O8b8ITDnlGU81666666zrY666P66fM6Yi:C73k
- TLSH T1D7759321B2F48514F2B63B30CD768AEC2AA5BC22AD75C35F76443B5E2F31651CD2172A
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
6/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-08-08_884d91f4ebdd9b4986a575c80b4b8d66_elex_glassworm_remcos_smoke-loader_stealc_stop_tofsee.exe
Resource
win10v2004-20260513-en
8 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-08-08_884d91f4ebdd9b4986a575c80b4b8d66_elex_glassworm_remcos_smoke-loader_stealc_stop_tofsee.exe
Resource
win11ltsc2024-20260709-en
8 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-08-08_884d91f4ebdd9b4986a575c80b4b8d66_elex_glassworm_remcos_smoke-loader_stealc_stop_tofsee
- Size 1.5MB
- SHA256 b70958e82b731d80235ae2009d710fae2d92dc0af81ada7c494eda3bab29ff9b
- MD5 884d91f4ebdd9b4986a575c80b4b8d66
- SHA1 f60fb3efbe8fd2e0c106e7fbd564234c9a7ba1ab
- SHA512 4b879f82a91923b80e2b42598b61fb1c73996d5d698164ca4a37b8c7a080fd7ffeb82b8c9e2182f4d9ef7d005ea336bcca3844fe95b0c22e70b4ed68984ef9ba
- SSDEEP 49152:p8YkY4O8b8ITDnlGU81666666zrY666P66fM6Yi:C73k
- TLSH T1D7759321B2F48514F2B63B30CD768AEC2AA5BC22AD75C35F76443B5E2F31651CD2172A
- MD5 SHA1 SHA512 SSDEEP TLSH
Score6/10-
Adds Run key to start application
-
Checks installed software on the system
Looks up Uninstall key entries in the registry to enumerate software on the system.
-
Drops file in System32 directory