General
- Target 2026-08-14_5f8bc25c98020f4ebec868d7fbbd218d_elex_glassworm_remcos_smoke-loader_stealc_stop_tofsee
- Size 2.3MB
- Sample260814-jqsagayakf
- SHA256 dca9db5fa303e9d73ae47d1cfc7b6af73b18f4d84c03e53e7f6583f148a6ff47
- MD5 5f8bc25c98020f4ebec868d7fbbd218d
- SHA1 778e3825af1b49625fe2124d1fc471fff290fe75
- SHA512 e1e0b01f226f718389fb47efc62d886251eddd144075346ef12d138ed1522736add49cc2e2d614754006003bcd00ec3f2339716d15d512b0c678708ed2fd7e5b
- SSDEEP 49152:+8YQAsadP0QiPzEz0AVISNT1Jty4O8b8ITDnljFX0YYF4YFR:Lf+P0PQQAVICX0R
- TLSH T165B5BE21B2E48025F4B77B348D768AA43A36BC129E75C24F364C375E6F716B0DE21726
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
6/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-08-14_5f8bc25c98020f4ebec868d7fbbd218d_elex_glassworm_remcos_smoke-loader_stealc_stop_tofsee.exe
Resource
win10v2004-20260513-en
8 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-08-14_5f8bc25c98020f4ebec868d7fbbd218d_elex_glassworm_remcos_smoke-loader_stealc_stop_tofsee.exe
Resource
win11ltsc2024-20260709-en
8 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-08-14_5f8bc25c98020f4ebec868d7fbbd218d_elex_glassworm_remcos_smoke-loader_stealc_stop_tofsee
- Size 2.3MB
- SHA256 dca9db5fa303e9d73ae47d1cfc7b6af73b18f4d84c03e53e7f6583f148a6ff47
- MD5 5f8bc25c98020f4ebec868d7fbbd218d
- SHA1 778e3825af1b49625fe2124d1fc471fff290fe75
- SHA512 e1e0b01f226f718389fb47efc62d886251eddd144075346ef12d138ed1522736add49cc2e2d614754006003bcd00ec3f2339716d15d512b0c678708ed2fd7e5b
- SSDEEP 49152:+8YQAsadP0QiPzEz0AVISNT1Jty4O8b8ITDnljFX0YYF4YFR:Lf+P0PQQAVICX0R
- TLSH T165B5BE21B2E48025F4B77B348D768AA43A36BC129E75C24F364C375E6F716B0DE21726
- MD5 SHA1 SHA512 SSDEEP TLSH
Score6/10-
Adds Run key to start application
-
Checks installed software on the system
Looks up Uninstall key entries in the registry to enumerate software on the system.
-
Drops file in System32 directory