General
- Target 2026-08-14_34a64694b9ede28db9b337871a5503be_elex_glassworm_remcos_smoke-loader_stealc_stop_tofsee
- Size 1.7MB
- Sample260814-ydc3ca1tgv
- SHA256 3e4622c2c05b217914e62a953d502e830132a85e14ad2770673db2e24185752d
- MD5 34a64694b9ede28db9b337871a5503be
- SHA1 1bb87fa3bf6572c8c07488056212ae9f831dd475
- SHA512 879d21f43fc8c1e49152739227c64ee8392ce908e13fedd168f399ab864a0c2bab7fc78d64c0a9e0b87394e36001d7eb42bb056e6a1f63cbf20c7ba4d06383d9
- SSDEEP 24576:qxWVeyRYspC4s2hz6c4O8b8ITDnl9F03M5WSL5:q8YfzuzP4O8b8ITDnl9F03M5v
- TLSH T1CD85C421B3F98115F5F37B709D764AA02A76BC62EE75864E3248371D1F70AA0C960B37
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
6/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-08-14_34a64694b9ede28db9b337871a5503be_elex_glassworm_remcos_smoke-loader_stealc_stop_tofsee.exe
Resource
win10v2004-20260513-en
8 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-08-14_34a64694b9ede28db9b337871a5503be_elex_glassworm_remcos_smoke-loader_stealc_stop_tofsee.exe
Resource
win11ltsc2024-20260709-en
8 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-08-14_34a64694b9ede28db9b337871a5503be_elex_glassworm_remcos_smoke-loader_stealc_stop_tofsee
- Size 1.7MB
- SHA256 3e4622c2c05b217914e62a953d502e830132a85e14ad2770673db2e24185752d
- MD5 34a64694b9ede28db9b337871a5503be
- SHA1 1bb87fa3bf6572c8c07488056212ae9f831dd475
- SHA512 879d21f43fc8c1e49152739227c64ee8392ce908e13fedd168f399ab864a0c2bab7fc78d64c0a9e0b87394e36001d7eb42bb056e6a1f63cbf20c7ba4d06383d9
- SSDEEP 24576:qxWVeyRYspC4s2hz6c4O8b8ITDnl9F03M5WSL5:q8YfzuzP4O8b8ITDnl9F03M5v
- TLSH T1CD85C421B3F98115F5F37B709D764AA02A76BC62EE75864E3248371D1F70AA0C960B37
- MD5 SHA1 SHA512 SSDEEP TLSH
Score6/10-
Adds Run key to start application
-
Checks installed software on the system
Looks up Uninstall key entries in the registry to enumerate software on the system.
-
Drops file in System32 directory