General
- Target 2026-08-11_50db07ac03fb39cf493e4858e90aeaf4_elex_glassworm_remcos_smoke-loader_stealc_stop_tofsee
- Size 890KB
- Sample260811-2sbdvazzcv
- SHA256 3c6f25cd0d1aa48aa9e06b401dab507868d78386768625c288c0b1c9ef94919f
- MD5 50db07ac03fb39cf493e4858e90aeaf4
- SHA1 60c7a6d476910ff92fee02b4a7313734f40b2262
- SHA512 a8c438d050f3a88f1a7bb232085d42c6a16dfaf61f732ba1a67805a21153ccd707b93058042023177b7576a0bcf09f5f00f1393ba1d19492b38fe29d2e2e4329
- SSDEEP 12288:QwKfOVRo9yRYSy4O8b8ITDnlyPiwLzyJS/ISwFOdZlVT:QxWVeyRYSy4O8b8ITDnleT
- TLSH T19115812372E98127F2F3FB3058754A712A66BC5E9AB4854E3248335D4F71AB0CD65B23
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
6/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-08-11_50db07ac03fb39cf493e4858e90aeaf4_elex_glassworm_remcos_smoke-loader_stealc_stop_tofsee.exe
Resource
win10v2004-20260513-en
8 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-08-11_50db07ac03fb39cf493e4858e90aeaf4_elex_glassworm_remcos_smoke-loader_stealc_stop_tofsee.exe
Resource
win11ltsc2024-20260709-en
8 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-08-11_50db07ac03fb39cf493e4858e90aeaf4_elex_glassworm_remcos_smoke-loader_stealc_stop_tofsee
- Size 890KB
- SHA256 3c6f25cd0d1aa48aa9e06b401dab507868d78386768625c288c0b1c9ef94919f
- MD5 50db07ac03fb39cf493e4858e90aeaf4
- SHA1 60c7a6d476910ff92fee02b4a7313734f40b2262
- SHA512 a8c438d050f3a88f1a7bb232085d42c6a16dfaf61f732ba1a67805a21153ccd707b93058042023177b7576a0bcf09f5f00f1393ba1d19492b38fe29d2e2e4329
- SSDEEP 12288:QwKfOVRo9yRYSy4O8b8ITDnlyPiwLzyJS/ISwFOdZlVT:QxWVeyRYSy4O8b8ITDnleT
- TLSH T19115812372E98127F2F3FB3058754A712A66BC5E9AB4854E3248335D4F71AB0CD65B23
- MD5 SHA1 SHA512 SSDEEP TLSH
Score6/10Adds Run key to start application
Checks installed software on the system
Looks up Uninstall key entries in the registry to enumerate software on the system.
Drops file in System32 directory