General
- Target 2026-08-14_3cdb2e1e405302cfe403a3a102731f06_elex_glassworm_remcos_smoke-loader_stealc_stop_tofsee
- Size 1.1MB
- Sample260814-j2nresycjf
- SHA256 00b9c5a2f41bcd28c3ade98f613dd55a6f1d7a331e2b7b1bd642beb5bc21381f
- MD5 3cdb2e1e405302cfe403a3a102731f06
- SHA1 60fd59f14afd289c95d0da2b7cbe5e6553d075e1
- SHA512 bc187cafa39241e94c3880c5965044949362ac0c79a9bf82b9ebd227bf7538c5dbbd73546d2044249ef1d0699b0680250e6687830240472b434734b50eff0bc2
- SSDEEP 24576:UxWVeyRYxz4O8b8ITDnljFspsYJL4YJLLh:U8YF4O8b8ITDnljFspsYF4YFF
- TLSH T1B0452A21B2E48025F4B77B348D768AA43A36BC129E75C64F364C375E6F316B0DE21726
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
6/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-08-14_3cdb2e1e405302cfe403a3a102731f06_elex_glassworm_remcos_smoke-loader_stealc_stop_tofsee.exe
Resource
win10v2004-20260513-en
8 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-08-14_3cdb2e1e405302cfe403a3a102731f06_elex_glassworm_remcos_smoke-loader_stealc_stop_tofsee.exe
Resource
win11ltsc2024-20260709-en
8 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-08-14_3cdb2e1e405302cfe403a3a102731f06_elex_glassworm_remcos_smoke-loader_stealc_stop_tofsee
- Size 1.1MB
- SHA256 00b9c5a2f41bcd28c3ade98f613dd55a6f1d7a331e2b7b1bd642beb5bc21381f
- MD5 3cdb2e1e405302cfe403a3a102731f06
- SHA1 60fd59f14afd289c95d0da2b7cbe5e6553d075e1
- SHA512 bc187cafa39241e94c3880c5965044949362ac0c79a9bf82b9ebd227bf7538c5dbbd73546d2044249ef1d0699b0680250e6687830240472b434734b50eff0bc2
- SSDEEP 24576:UxWVeyRYxz4O8b8ITDnljFspsYJL4YJLLh:U8YF4O8b8ITDnljFspsYF4YFF
- TLSH T1B0452A21B2E48025F4B77B348D768AA43A36BC129E75C64F364C375E6F316B0DE21726
- MD5 SHA1 SHA512 SSDEEP TLSH
Score6/10-
Adds Run key to start application
-
Checks installed software on the system
Looks up Uninstall key entries in the registry to enumerate software on the system.
-
Drops file in System32 directory