General
- Target 2026-08-15_58767c0fb6d2bbd610005b42218864c3_elex_glassworm_remcos_smoke-loader_stealc_stop_tofsee
- Size 1.1MB
- Sample260815-wsyaqa1ere
- SHA256 187347471fbef015caa8f2342af2b6372d3e760c1c2b133867c62fbd230ba319
- MD5 58767c0fb6d2bbd610005b42218864c3
- SHA1 92f0d2a3bc39ea76db7caa68e36382da6d9e149e
- SHA512 5743936e50c5e109f54e8c783037dbda937c3e980516c2efe748f6d4d00586748011887d96c2defd2a87615d360cf129c091d3a2ef39e60e12cca694c94e772e
- SSDEEP 12288:cwKfOVRo9yRYQdLm64O8b8ITDnlr0rYzB:cxWVeyRY6Lm64O8b8ITDnlw6B
- TLSH T1E035E922F2D4C010F6B73F30497A8AA0EA36BC516AB4868F765C3B1D5F717A1DD2531A
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
6/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-08-15_58767c0fb6d2bbd610005b42218864c3_elex_glassworm_remcos_smoke-loader_stealc_stop_tofsee.exe
Resource
win10v2004-20260513-en
8 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-08-15_58767c0fb6d2bbd610005b42218864c3_elex_glassworm_remcos_smoke-loader_stealc_stop_tofsee.exe
Resource
win11ltsc2024-20260709-en
8 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-08-15_58767c0fb6d2bbd610005b42218864c3_elex_glassworm_remcos_smoke-loader_stealc_stop_tofsee
- Size 1.1MB
- SHA256 187347471fbef015caa8f2342af2b6372d3e760c1c2b133867c62fbd230ba319
- MD5 58767c0fb6d2bbd610005b42218864c3
- SHA1 92f0d2a3bc39ea76db7caa68e36382da6d9e149e
- SHA512 5743936e50c5e109f54e8c783037dbda937c3e980516c2efe748f6d4d00586748011887d96c2defd2a87615d360cf129c091d3a2ef39e60e12cca694c94e772e
- SSDEEP 12288:cwKfOVRo9yRYQdLm64O8b8ITDnlr0rYzB:cxWVeyRY6Lm64O8b8ITDnlw6B
- TLSH T1E035E922F2D4C010F6B73F30497A8AA0EA36BC516AB4868F765C3B1D5F717A1DD2531A
- MD5 SHA1 SHA512 SSDEEP TLSH
Score6/10-
Adds Run key to start application
-
Checks installed software on the system
Looks up Uninstall key entries in the registry to enumerate software on the system.
-
Drops file in System32 directory