General
- Target 2026-08-13_717bdda3d852b66c6fa20e311134aab4_elex_glassworm_remcos_smoke-loader_stealc_stop_tofsee
- Size 1.9MB
- Sample260813-2kpaqszeka
- SHA256 e7313ecd3bb0c978349652ccabd66dc7b9222088b7ab784ef4d38dfb7a6fc870
- MD5 717bdda3d852b66c6fa20e311134aab4
- SHA1 282f60fd3d629bd1b1db4a0b8b554fae1650b320
- SHA512 c3fbb38acad70d9adba930dc0fb28ae6fc4588ea3d2e020b5847ab15dfa2aa4f6dee50b1c655a6061cdc5bb29f6cdddd6079931820377ffcf57b851e58f97958
- SSDEEP 24576:pxWVeyRY9kLm54O8b8ITDnle8T2o2zNgolL:p8Yj4O8b8ITDnle8T2o2b9
- TLSH T19F951E33E7F7501DE6BB3AF4997414A40B227C10EA75D16E2162361ED935EA1FB20F22
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
6/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-08-13_717bdda3d852b66c6fa20e311134aab4_elex_glassworm_remcos_smoke-loader_stealc_stop_tofsee.exe
Resource
win10v2004-20260513-en
8 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-08-13_717bdda3d852b66c6fa20e311134aab4_elex_glassworm_remcos_smoke-loader_stealc_stop_tofsee.exe
Resource
win11ltsc2024-20260709-en
8 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-08-13_717bdda3d852b66c6fa20e311134aab4_elex_glassworm_remcos_smoke-loader_stealc_stop_tofsee
- Size 1.9MB
- SHA256 e7313ecd3bb0c978349652ccabd66dc7b9222088b7ab784ef4d38dfb7a6fc870
- MD5 717bdda3d852b66c6fa20e311134aab4
- SHA1 282f60fd3d629bd1b1db4a0b8b554fae1650b320
- SHA512 c3fbb38acad70d9adba930dc0fb28ae6fc4588ea3d2e020b5847ab15dfa2aa4f6dee50b1c655a6061cdc5bb29f6cdddd6079931820377ffcf57b851e58f97958
- SSDEEP 24576:pxWVeyRY9kLm54O8b8ITDnle8T2o2zNgolL:p8Yj4O8b8ITDnle8T2o2b9
- TLSH T19F951E33E7F7501DE6BB3AF4997414A40B227C10EA75D16E2162361ED935EA1FB20F22
- MD5 SHA1 SHA512 SSDEEP TLSH
Score6/10-
Adds Run key to start application
-
Checks installed software on the system
Looks up Uninstall key entries in the registry to enumerate software on the system.
-
Drops file in System32 directory