General
- Target 2026-08-10_8429001dd7be709714fea7068ff84ab0_elex_glassworm_remcos_smoke-loader_stealc_stop_tofsee
- Size 2.0MB
- Sample260810-e6a9nsvzds
- SHA256 38ce7617da5c89cbfae14506f0c4ea14010dea0a0dedd1173357814f745c64c5
- MD5 8429001dd7be709714fea7068ff84ab0
- SHA1 956dd483062eb9526a48f4640bf37277467fe4cf
- SHA512 ccc49675acf7f34faf89311e90d10b684a425f861f8c2bfc033eb2868a3ec899938fa3a885d5da4a96d049fe3a729a79944c8aa0801def5453497ebea87909ff
- SSDEEP 12288:pwKfOVRo9yRYD4O8b8ITDnlE8FF0Nqom77qH9:pxWVeyRYD4O8b8ITDnlrFMqQ9
- TLSH T177A5C52176E0D815F2E226309D768AA429167C115EF88A8B374BFF8F7FF2564CD12316
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
6/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-08-10_8429001dd7be709714fea7068ff84ab0_elex_glassworm_remcos_smoke-loader_stealc_stop_tofsee.exe
Resource
win10v2004-20260513-en
8 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-08-10_8429001dd7be709714fea7068ff84ab0_elex_glassworm_remcos_smoke-loader_stealc_stop_tofsee.exe
Resource
win11ltsc2024-20260710-en
8 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-08-10_8429001dd7be709714fea7068ff84ab0_elex_glassworm_remcos_smoke-loader_stealc_stop_tofsee
- Size 2.0MB
- SHA256 38ce7617da5c89cbfae14506f0c4ea14010dea0a0dedd1173357814f745c64c5
- MD5 8429001dd7be709714fea7068ff84ab0
- SHA1 956dd483062eb9526a48f4640bf37277467fe4cf
- SHA512 ccc49675acf7f34faf89311e90d10b684a425f861f8c2bfc033eb2868a3ec899938fa3a885d5da4a96d049fe3a729a79944c8aa0801def5453497ebea87909ff
- SSDEEP 12288:pwKfOVRo9yRYD4O8b8ITDnlE8FF0Nqom77qH9:pxWVeyRYD4O8b8ITDnlrFMqQ9
- TLSH T177A5C52176E0D815F2E226309D768AA429167C115EF88A8B374BFF8F7FF2564CD12316
- MD5 SHA1 SHA512 SSDEEP TLSH
Score6/10-
Adds Run key to start application
-
Checks installed software on the system
Looks up Uninstall key entries in the registry to enumerate software on the system.
-
Drops file in System32 directory