General
- Target 2026-08-12_f79f22321e0ac5b61dce471e0612bf09_elex_glassworm_remcos_smoke-loader_stealc_stop_tofsee
- Size 2.9MB
- Sample260812-1kh82stscw
- SHA256 61d4677b9063868502cc98a5467eeb0c20ab5b1a535737a03f058a74e2cd3269
- MD5 f79f22321e0ac5b61dce471e0612bf09
- SHA1 17f9b4b80b12927c40d03c909ac955e8989a6b24
- SHA512 ad2544606db2ca4876ece920209c3211aa030771a9bf176c4a61151ad3d60f6ba49ca3bf331db80818f0ffb727257db8798d351485f3c9f47e00f74cb04d2db4
- SSDEEP 24576:txWVeyRY74s2hzntVIJqW/RyiqmxRX9aiehY/w4ceoep0Rz3T:t8Y7zuzntVxW/RZPxRX9PehD4ceosg
- TLSH T1A1E50862A6F9D124F5F72B30DD7546B94923BC92DA39819F324C391D2F30BA48971B23
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
6/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-08-12_f79f22321e0ac5b61dce471e0612bf09_elex_glassworm_remcos_smoke-loader_stealc_stop_tofsee.exe
Resource
win10v2004-20260513-en
8 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-08-12_f79f22321e0ac5b61dce471e0612bf09_elex_glassworm_remcos_smoke-loader_stealc_stop_tofsee.exe
Resource
win11ltsc2024-20260709-en
8 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-08-12_f79f22321e0ac5b61dce471e0612bf09_elex_glassworm_remcos_smoke-loader_stealc_stop_tofsee
- Size 2.9MB
- SHA256 61d4677b9063868502cc98a5467eeb0c20ab5b1a535737a03f058a74e2cd3269
- MD5 f79f22321e0ac5b61dce471e0612bf09
- SHA1 17f9b4b80b12927c40d03c909ac955e8989a6b24
- SHA512 ad2544606db2ca4876ece920209c3211aa030771a9bf176c4a61151ad3d60f6ba49ca3bf331db80818f0ffb727257db8798d351485f3c9f47e00f74cb04d2db4
- SSDEEP 24576:txWVeyRY74s2hzntVIJqW/RyiqmxRX9aiehY/w4ceoep0Rz3T:t8Y7zuzntVxW/RZPxRX9PehD4ceosg
- TLSH T1A1E50862A6F9D124F5F72B30DD7546B94923BC92DA39819F324C391D2F30BA48971B23
- MD5 SHA1 SHA512 SSDEEP TLSH
Score6/10-
Adds Run key to start application
-
Checks installed software on the system
Looks up Uninstall key entries in the registry to enumerate software on the system.
-
Drops file in System32 directory