General
- Target 2026-08-11_50db07ac03fb39cf493e4858e90aeaf4_elex_glassworm_remcos_smoke-loader_stealc_stop_tofsee
- Size 890KB
- Sample260811-2sbdvazzcv
- SHA256 3c6f25cd0d1aa48aa9e06b401dab507868d78386768625c288c0b1c9ef94919f
- MD5 50db07ac03fb39cf493e4858e90aeaf4
- SHA1 60c7a6d476910ff92fee02b4a7313734f40b2262
- SHA512 a8c438d050f3a88f1a7bb232085d42c6a16dfaf61f732ba1a67805a21153ccd707b93058042023177b7576a0bcf09f5f00f1393ba1d19492b38fe29d2e2e4329
- SSDEEP 12288:QwKfOVRo9yRYSy4O8b8ITDnlyPiwLzyJS/ISwFOdZlVT:QxWVeyRYSy4O8b8ITDnleT
- TLSH T19115812372E98127F2F3FB3058754A712A66BC5E9AB4854E3248335D4F71AB0CD65B23
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
6/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-08-11_50db07ac03fb39cf493e4858e90aeaf4_elex_glassworm_remcos_smoke-loader_stealc_stop_tofsee.exe
Resource
win10v2004-20260513-en
8 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-08-11_50db07ac03fb39cf493e4858e90aeaf4_elex_glassworm_remcos_smoke-loader_stealc_stop_tofsee.exe
Resource
win11ltsc2024-20260709-en
8 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-08-11_50db07ac03fb39cf493e4858e90aeaf4_elex_glassworm_remcos_smoke-loader_stealc_stop_tofsee
- Size 890KB
- SHA256 3c6f25cd0d1aa48aa9e06b401dab507868d78386768625c288c0b1c9ef94919f
- MD5 50db07ac03fb39cf493e4858e90aeaf4
- SHA1 60c7a6d476910ff92fee02b4a7313734f40b2262
- SHA512 a8c438d050f3a88f1a7bb232085d42c6a16dfaf61f732ba1a67805a21153ccd707b93058042023177b7576a0bcf09f5f00f1393ba1d19492b38fe29d2e2e4329
- SSDEEP 12288:QwKfOVRo9yRYSy4O8b8ITDnlyPiwLzyJS/ISwFOdZlVT:QxWVeyRYSy4O8b8ITDnleT
- TLSH T19115812372E98127F2F3FB3058754A712A66BC5E9AB4854E3248335D4F71AB0CD65B23
- MD5 SHA1 SHA512 SSDEEP TLSH
Score6/10-
Adds Run key to start application
-
Checks installed software on the system
Looks up Uninstall key entries in the registry to enumerate software on the system.
-
Drops file in System32 directory