General
- Target 2026-08-15_03411dea538138a6103f878bebdff50e_elex_glassworm_remcos_smoke-loader_stealc_stop_tofsee
- Size 1.1MB
- Sample260815-xajv2ssbjd
- SHA256 ceefd4833f0e84809522eb7c09501164634ce21fae95fc65daf0309cc1612cac
- MD5 03411dea538138a6103f878bebdff50e
- SHA1 ea4fd5feab16bdd1abf29ebe4f9a74b47b78bcd6
- SHA512 214e175f533efc9879ab089472f75a996328cf6acde713c81cceb0b4a71e3f22a23237d22815949d458eeef017c6fc990ebd15978b2fbfb3cdfec7d4bf9e00e0
- SSDEEP 24576:UxWVeyRY8z4O8b8ITDnljFspsYJL4YJLIA:U8Ym4O8b8ITDnljFspsYF4YFT
- TLSH T107452A21B2E48025F4B77B308D768AA43A36BC129E75C64F364C375E6F716B0DE21726
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
6/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-08-15_03411dea538138a6103f878bebdff50e_elex_glassworm_remcos_smoke-loader_stealc_stop_tofsee.exe
Resource
win10v2004-20260513-en
8 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-08-15_03411dea538138a6103f878bebdff50e_elex_glassworm_remcos_smoke-loader_stealc_stop_tofsee.exe
Resource
win11ltsc2024-20260709-en
8 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-08-15_03411dea538138a6103f878bebdff50e_elex_glassworm_remcos_smoke-loader_stealc_stop_tofsee
- Size 1.1MB
- SHA256 ceefd4833f0e84809522eb7c09501164634ce21fae95fc65daf0309cc1612cac
- MD5 03411dea538138a6103f878bebdff50e
- SHA1 ea4fd5feab16bdd1abf29ebe4f9a74b47b78bcd6
- SHA512 214e175f533efc9879ab089472f75a996328cf6acde713c81cceb0b4a71e3f22a23237d22815949d458eeef017c6fc990ebd15978b2fbfb3cdfec7d4bf9e00e0
- SSDEEP 24576:UxWVeyRY8z4O8b8ITDnljFspsYJL4YJLIA:U8Ym4O8b8ITDnljFspsYF4YFT
- TLSH T107452A21B2E48025F4B77B308D768AA43A36BC129E75C64F364C375E6F716B0DE21726
- MD5 SHA1 SHA512 SSDEEP TLSH
Score6/10-
Adds Run key to start application
-
Checks installed software on the system
Looks up Uninstall key entries in the registry to enumerate software on the system.
-
Drops file in System32 directory