General
- Target 2026-08-13_60d5bdc3720d5b99023d37895123d426_elex_glassworm_remcos_smoke-loader_stealc_stop_tofsee
- Size 1.0MB
- Sample260813-ffjc2agg99
- SHA256 9fd9803008f4b76e2d9f31ab76850765e078017fa597bedafa121bc4f67c933c
- MD5 60d5bdc3720d5b99023d37895123d426
- SHA1 d1b297035f2c9cfc3c6a358b0d3b61d20d415231
- SHA512 40742256a630730991008701844aaf49da10ffb8fdd931ef24c188aa020bb1fcb75f5a954ce34b924de24275c2f69d69a563b83c7d6267f1568b22996962c23e
- SSDEEP 6144:ewynAtMrOVRkidy9yIGWlUiQyFrfTQJUEEDeR/SHdCzxcxoX3/Di5R/SHdCzxJhU:ewKfOVRo9yRYnN0ED1703/Di0qhTwh
- TLSH T123255A51BA98C021E4621A34CD6AC2F85625BD62EF2187C77A8C3F0FBF317D1993571A
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
6/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-08-13_60d5bdc3720d5b99023d37895123d426_elex_glassworm_remcos_smoke-loader_stealc_stop_tofsee.exe
Resource
win10v2004-20260513-en
8 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-08-13_60d5bdc3720d5b99023d37895123d426_elex_glassworm_remcos_smoke-loader_stealc_stop_tofsee.exe
Resource
win11ltsc2024-20260709-en
8 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-08-13_60d5bdc3720d5b99023d37895123d426_elex_glassworm_remcos_smoke-loader_stealc_stop_tofsee
- Size 1.0MB
- SHA256 9fd9803008f4b76e2d9f31ab76850765e078017fa597bedafa121bc4f67c933c
- MD5 60d5bdc3720d5b99023d37895123d426
- SHA1 d1b297035f2c9cfc3c6a358b0d3b61d20d415231
- SHA512 40742256a630730991008701844aaf49da10ffb8fdd931ef24c188aa020bb1fcb75f5a954ce34b924de24275c2f69d69a563b83c7d6267f1568b22996962c23e
- SSDEEP 6144:ewynAtMrOVRkidy9yIGWlUiQyFrfTQJUEEDeR/SHdCzxcxoX3/Di5R/SHdCzxJhU:ewKfOVRo9yRYnN0ED1703/Di0qhTwh
- TLSH T123255A51BA98C021E4621A34CD6AC2F85625BD62EF2187C77A8C3F0FBF317D1993571A
- MD5 SHA1 SHA512 SSDEEP TLSH
Score6/10-
Adds Run key to start application
-
Checks installed software on the system
Looks up Uninstall key entries in the registry to enumerate software on the system.
-
Drops file in System32 directory