General
- Target 2026-08-10_671b9eb2b6d953e567e6307c819ee189_elex_glassworm_remcos_smoke-loader_stealc_stop_tofsee
- Size 2.0MB
- Sample260810-3vwcgabc75
- SHA256 103a7dbf6591e1d84c22157efd9323a11ef095f04e2da8d3218e1cb76d88168c
- MD5 671b9eb2b6d953e567e6307c819ee189
- SHA1 8ec8a65ba094896b63aae2a389263a38dbe5ecac
- SHA512 a0b6c36f912a3fe92f6d2291c9a29054a43d96ae6a7e29393f80647b7742081a2843ca6b22b4f6dc46b40a14bc500554b515c93f61a2bc45b19fd890c0547235
- SSDEEP 12288:hwKfOVRo9yRYR4O8b8ITDnlE8FF0Nqom77qH+:hxWVeyRYR4O8b8ITDnlrFMqQ+
- TLSH T13DA5C52176E0D815F2E226309D768AA429167C115EF88A8B374BFF8F7FF2564CD12316
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
6/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-08-10_671b9eb2b6d953e567e6307c819ee189_elex_glassworm_remcos_smoke-loader_stealc_stop_tofsee.exe
Resource
win10v2004-20260513-en
8 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-08-10_671b9eb2b6d953e567e6307c819ee189_elex_glassworm_remcos_smoke-loader_stealc_stop_tofsee.exe
Resource
win11ltsc2024-20260709-en
8 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-08-10_671b9eb2b6d953e567e6307c819ee189_elex_glassworm_remcos_smoke-loader_stealc_stop_tofsee
- Size 2.0MB
- SHA256 103a7dbf6591e1d84c22157efd9323a11ef095f04e2da8d3218e1cb76d88168c
- MD5 671b9eb2b6d953e567e6307c819ee189
- SHA1 8ec8a65ba094896b63aae2a389263a38dbe5ecac
- SHA512 a0b6c36f912a3fe92f6d2291c9a29054a43d96ae6a7e29393f80647b7742081a2843ca6b22b4f6dc46b40a14bc500554b515c93f61a2bc45b19fd890c0547235
- SSDEEP 12288:hwKfOVRo9yRYR4O8b8ITDnlE8FF0Nqom77qH+:hxWVeyRYR4O8b8ITDnlrFMqQ+
- TLSH T13DA5C52176E0D815F2E226309D768AA429167C115EF88A8B374BFF8F7FF2564CD12316
- MD5 SHA1 SHA512 SSDEEP TLSH
Score6/10-
Adds Run key to start application
-
Checks installed software on the system
Looks up Uninstall key entries in the registry to enumerate software on the system.
-
Drops file in System32 directory