General
- Target 2026-08-16_04ac601c68df96fcf78863a282e2508f_elex_glassworm_remcos_smoke-loader_stealc_stop_tofsee
- Size 1.0MB
- Sample260816-145ldsyckg
- SHA256 35f7e6e7dfd66e29fa994423b19e9c330b6c05446c4fd07469cc52ed6316c228
- MD5 04ac601c68df96fcf78863a282e2508f
- SHA1 ac147f1f90929e6a37ff027cbd486e6dece7cb86
- SHA512 d5adb95c19a1e8698e234b02cfff54405d26e74f8d01373c78c9722eea8f71e9c395dbcaa1b511869ce21c42bfbd311ce3b9b00243b17cd6afd16e570f653599
- SSDEEP 12288:AwKfOVRo9yRYQd4O8b8ITDnlFtTx5KEZF46j/:AxWVeyRYQd4O8b8ITDnldDT
- TLSH T1E7356E2162F98A29F5F33F314A719E65EA76BC559AB8814E2259331D0F34BB1CD30723
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
6/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-08-16_04ac601c68df96fcf78863a282e2508f_elex_glassworm_remcos_smoke-loader_stealc_stop_tofsee.exe
Resource
win10v2004-20260513-en
8 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-08-16_04ac601c68df96fcf78863a282e2508f_elex_glassworm_remcos_smoke-loader_stealc_stop_tofsee.exe
Resource
win11ltsc2024-20260709-en
8 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-08-16_04ac601c68df96fcf78863a282e2508f_elex_glassworm_remcos_smoke-loader_stealc_stop_tofsee
- Size 1.0MB
- SHA256 35f7e6e7dfd66e29fa994423b19e9c330b6c05446c4fd07469cc52ed6316c228
- MD5 04ac601c68df96fcf78863a282e2508f
- SHA1 ac147f1f90929e6a37ff027cbd486e6dece7cb86
- SHA512 d5adb95c19a1e8698e234b02cfff54405d26e74f8d01373c78c9722eea8f71e9c395dbcaa1b511869ce21c42bfbd311ce3b9b00243b17cd6afd16e570f653599
- SSDEEP 12288:AwKfOVRo9yRYQd4O8b8ITDnlFtTx5KEZF46j/:AxWVeyRYQd4O8b8ITDnldDT
- TLSH T1E7356E2162F98A29F5F33F314A719E65EA76BC559AB8814E2259331D0F34BB1CD30723
- MD5 SHA1 SHA512 SSDEEP TLSH
Score6/10-
Adds Run key to start application
-
Checks installed software on the system
Looks up Uninstall key entries in the registry to enumerate software on the system.
-
Drops file in System32 directory