General
- Target 2026-08-10_4e3f6258197d4d71d9ae81609644aa2e_elex_glassworm_remcos_smoke-loader_stealc_stop_tofsee
- Size 1.2MB
- Sample260810-y9dnraad75
- SHA256 16cf96f37b17ede634fc32502eaed091e0e07c1e6981df756aebdf8204f37ae7
- MD5 4e3f6258197d4d71d9ae81609644aa2e
- SHA1 5159da09dcc0a0185289413a80632a543336b171
- SHA512 0a41e1cab36560dfe1b8bbf58a08e8c0851a393bb4e67e373fd936456497e29cd0e73e5e9c67d2211158c5513286d9de4e62e6968878e13942d3c9ff039c1397
- SSDEEP 12288:pwKfOVRo9yRY2LmC4O8b8ITDnljFF0K871qz/:pxWVeyRY2LmC4O8b8ITDnljFT/
- TLSH T18645F922F2E4C014E4B737304D7A8EA42A36BC52ADB4879F359C3B4D6F716A0DD25726
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
6/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-08-10_4e3f6258197d4d71d9ae81609644aa2e_elex_glassworm_remcos_smoke-loader_stealc_stop_tofsee.exe
Resource
win10v2004-20260513-en
8 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-08-10_4e3f6258197d4d71d9ae81609644aa2e_elex_glassworm_remcos_smoke-loader_stealc_stop_tofsee.exe
Resource
win11ltsc2024-20260709-en
8 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-08-10_4e3f6258197d4d71d9ae81609644aa2e_elex_glassworm_remcos_smoke-loader_stealc_stop_tofsee
- Size 1.2MB
- SHA256 16cf96f37b17ede634fc32502eaed091e0e07c1e6981df756aebdf8204f37ae7
- MD5 4e3f6258197d4d71d9ae81609644aa2e
- SHA1 5159da09dcc0a0185289413a80632a543336b171
- SHA512 0a41e1cab36560dfe1b8bbf58a08e8c0851a393bb4e67e373fd936456497e29cd0e73e5e9c67d2211158c5513286d9de4e62e6968878e13942d3c9ff039c1397
- SSDEEP 12288:pwKfOVRo9yRY2LmC4O8b8ITDnljFF0K871qz/:pxWVeyRY2LmC4O8b8ITDnljFT/
- TLSH T18645F922F2E4C014E4B737304D7A8EA42A36BC52ADB4879F359C3B4D6F716A0DD25726
- MD5 SHA1 SHA512 SSDEEP TLSH
Score6/10-
Adds Run key to start application
-
Checks installed software on the system
Looks up Uninstall key entries in the registry to enumerate software on the system.
-
Drops file in System32 directory