General
- Target 2026-08-13_6bde0f8caebfe7195f39a0fe587a7ac3_elex_glassworm_remcos_smoke-loader_stealc_stop_tofsee
- Size 1.3MB
- Sample260813-fbl85azyft
- SHA256 91191a69c4bf70916f4d943fd756db6f98a3b6979995cccaf403a7e4be7ee675
- MD5 6bde0f8caebfe7195f39a0fe587a7ac3
- SHA1 ef36114fa7ac44fba95a47e0371dea3c0c9b8e7f
- SHA512 b196a08fd6f32fa83b2f34a46fd57bfe0122c0743b0da6b3ab932e1c7e74377915d2ab536f6ef318007a70a7c21a08ebca11a018be88e49198a35bb5afe384c5
- SSDEEP 12288:OwKfOVRo9yRYfNRJwzYDteYIpREB0tvUZyJS/INFOdXja0Eyb:OxWVeyRYfLJwzYDteYIp6pb
- TLSH T17B653F03B3E99157F5B3EF3099B542B4DA76BC5E6E39C64E3244324E5E71B808A21732
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
8/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-08-13_6bde0f8caebfe7195f39a0fe587a7ac3_elex_glassworm_remcos_smoke-loader_stealc_stop_tofsee.exe
Resource
win10v2004-20260513-en
9 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-08-13_6bde0f8caebfe7195f39a0fe587a7ac3_elex_glassworm_remcos_smoke-loader_stealc_stop_tofsee.exe
Resource
win11ltsc2024-20260709-en
8 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-08-13_6bde0f8caebfe7195f39a0fe587a7ac3_elex_glassworm_remcos_smoke-loader_stealc_stop_tofsee
- Size 1.3MB
- SHA256 91191a69c4bf70916f4d943fd756db6f98a3b6979995cccaf403a7e4be7ee675
- MD5 6bde0f8caebfe7195f39a0fe587a7ac3
- SHA1 ef36114fa7ac44fba95a47e0371dea3c0c9b8e7f
- SHA512 b196a08fd6f32fa83b2f34a46fd57bfe0122c0743b0da6b3ab932e1c7e74377915d2ab536f6ef318007a70a7c21a08ebca11a018be88e49198a35bb5afe384c5
- SSDEEP 12288:OwKfOVRo9yRYfNRJwzYDteYIpREB0tvUZyJS/INFOdXja0Eyb:OxWVeyRYfLJwzYDteYIp6pb
- TLSH T17B653F03B3E99157F5B3EF3099B542B4DA76BC5E6E39C64E3244324E5E71B808A21732
- MD5 SHA1 SHA512 SSDEEP TLSH
Score8/10-
Drops file in Drivers directory
-
Adds Run key to start application
-
Checks installed software on the system
Looks up Uninstall key entries in the registry to enumerate software on the system.
-
Drops file in System32 directory