General
- Target 2026-08-09_6806df445306dd4d12630584bc623e16_elex_glassworm_remcos_smoke-loader_stealc_stop_tofsee
- Size 903KB
- Sample260809-zrf7layxes
- SHA256 9411240ba91bbbe8895e4ddad092b79be6c1c3758787b2525a824e26aa663634
- MD5 6806df445306dd4d12630584bc623e16
- SHA1 2eda217e78b3f50a88387c76b12e61ebdb0a9d10
- SHA512 38b393238cec0f56262085572d6293d841489c37bd4d4bfbcc6109ca8c8b7c871915bb697c3c706f99f5166a1c0f2434c5f465ee8baa277eeb87caaba2bed8f9
- SSDEEP 12288:wwKfOVRo9yRYkgB4O8b8ITDnl20ht/YRDXVdfM:wxWVeyRYFB4O8b8ITDnldtAxzM
- TLSH T19B153835B6E48021D5B27A344EBB8EA07625BC166EF4C68B364C7B5E7F306B1CD21316
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
6/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-08-09_6806df445306dd4d12630584bc623e16_elex_glassworm_remcos_smoke-loader_stealc_stop_tofsee.exe
Resource
win10v2004-20260513-en
8 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-08-09_6806df445306dd4d12630584bc623e16_elex_glassworm_remcos_smoke-loader_stealc_stop_tofsee.exe
Resource
win11ltsc2024-20260709-en
8 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-08-09_6806df445306dd4d12630584bc623e16_elex_glassworm_remcos_smoke-loader_stealc_stop_tofsee
- Size 903KB
- SHA256 9411240ba91bbbe8895e4ddad092b79be6c1c3758787b2525a824e26aa663634
- MD5 6806df445306dd4d12630584bc623e16
- SHA1 2eda217e78b3f50a88387c76b12e61ebdb0a9d10
- SHA512 38b393238cec0f56262085572d6293d841489c37bd4d4bfbcc6109ca8c8b7c871915bb697c3c706f99f5166a1c0f2434c5f465ee8baa277eeb87caaba2bed8f9
- SSDEEP 12288:wwKfOVRo9yRYkgB4O8b8ITDnl20ht/YRDXVdfM:wxWVeyRYFB4O8b8ITDnldtAxzM
- TLSH T19B153835B6E48021D5B27A344EBB8EA07625BC166EF4C68B364C7B5E7F306B1CD21316
- MD5 SHA1 SHA512 SSDEEP TLSH
Score6/10-
Adds Run key to start application
-
Checks installed software on the system
Looks up Uninstall key entries in the registry to enumerate software on the system.
-
Drops file in System32 directory