General
- Target 2026-08-10_86ad51c4b89635f181f91000c34a9a85_elex_glassworm_remcos_smoke-loader_stealc_stop_tofsee
- Size 1.0MB
- Sample260810-e5c2wabj4y
- SHA256 f34e2c7f30e8c52aa5977a94fbc258f21104411341a4dbf469570eb8c8ad79dd
- MD5 86ad51c4b89635f181f91000c34a9a85
- SHA1 8c2bdb3000839cf47b0d6815b161f9a26e936ba5
- SHA512 b0da13b490fa7a0ef1de4a2b933ffeb2979683c397922295dfc05bd418b7f7db40b1a4f3bd4c5081e4afafec1908e02ccf19fb32162bb1430f66c0ccf3823e23
- SSDEEP 6144:OwynAtMrOVRkidy9yIGWlUiaYHMfTQJUEEDeR/SHdCzxcxoX3/Di5R/SHdCzxJhQ:OwKfOVRo9yRYvU0ED1703/Di0qhvwJ
- TLSH T1BB255B51BA98C021E4621A34CD6AC2F85665BD62EF2187C77A8C3F0FBF307D1993571A
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
6/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-08-10_86ad51c4b89635f181f91000c34a9a85_elex_glassworm_remcos_smoke-loader_stealc_stop_tofsee.exe
Resource
win10v2004-20260513-en
8 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-08-10_86ad51c4b89635f181f91000c34a9a85_elex_glassworm_remcos_smoke-loader_stealc_stop_tofsee.exe
Resource
win11ltsc2024-20260709-en
8 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-08-10_86ad51c4b89635f181f91000c34a9a85_elex_glassworm_remcos_smoke-loader_stealc_stop_tofsee
- Size 1.0MB
- SHA256 f34e2c7f30e8c52aa5977a94fbc258f21104411341a4dbf469570eb8c8ad79dd
- MD5 86ad51c4b89635f181f91000c34a9a85
- SHA1 8c2bdb3000839cf47b0d6815b161f9a26e936ba5
- SHA512 b0da13b490fa7a0ef1de4a2b933ffeb2979683c397922295dfc05bd418b7f7db40b1a4f3bd4c5081e4afafec1908e02ccf19fb32162bb1430f66c0ccf3823e23
- SSDEEP 6144:OwynAtMrOVRkidy9yIGWlUiaYHMfTQJUEEDeR/SHdCzxcxoX3/Di5R/SHdCzxJhQ:OwKfOVRo9yRYvU0ED1703/Di0qhvwJ
- TLSH T1BB255B51BA98C021E4621A34CD6AC2F85665BD62EF2187C77A8C3F0FBF307D1993571A
- MD5 SHA1 SHA512 SSDEEP TLSH
Score6/10-
Adds Run key to start application
-
Checks installed software on the system
Looks up Uninstall key entries in the registry to enumerate software on the system.
-
Drops file in System32 directory