General
- Target 2026-08-16_cc5c92c32f66452f868d93749dd55c52_elex_glassworm_remcos_smoke-loader_stealc_stop_tofsee
- Size 1.1MB
- Sample260816-b9ymlaxdnb
- SHA256 9e8b6bc3b9a2b7cb0235415d755ec44d93a20ee0e6ed963b5239fc4cb2224e39
- MD5 cc5c92c32f66452f868d93749dd55c52
- SHA1 6a8d2ab7b03495cb842216580f263d441b2d3132
- SHA512 0445ddb0f225c9fa7f7c6155b5a9caa7519fd56de3066f8ec5457ac8a3d7d7f7f38cd1a890c2c7a6e6f2e782c71696d199dc64517b6002739340231468880da0
- SSDEEP 12288:7wKfOVRo9yRYnrLwzYDteYIpREn0tQa7XYff:7xWVeyRY3wzYDteYIp6TaEff
- TLSH T16845950277F89119F5F36F309DB942A4DA76BC52AF39C64F3684324E1E71B809A21763
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
6/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-08-16_cc5c92c32f66452f868d93749dd55c52_elex_glassworm_remcos_smoke-loader_stealc_stop_tofsee.exe
Resource
win10v2004-20260513-en
8 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-08-16_cc5c92c32f66452f868d93749dd55c52_elex_glassworm_remcos_smoke-loader_stealc_stop_tofsee.exe
Resource
win11ltsc2024-20260709-en
8 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-08-16_cc5c92c32f66452f868d93749dd55c52_elex_glassworm_remcos_smoke-loader_stealc_stop_tofsee
- Size 1.1MB
- SHA256 9e8b6bc3b9a2b7cb0235415d755ec44d93a20ee0e6ed963b5239fc4cb2224e39
- MD5 cc5c92c32f66452f868d93749dd55c52
- SHA1 6a8d2ab7b03495cb842216580f263d441b2d3132
- SHA512 0445ddb0f225c9fa7f7c6155b5a9caa7519fd56de3066f8ec5457ac8a3d7d7f7f38cd1a890c2c7a6e6f2e782c71696d199dc64517b6002739340231468880da0
- SSDEEP 12288:7wKfOVRo9yRYnrLwzYDteYIpREn0tQa7XYff:7xWVeyRY3wzYDteYIp6TaEff
- TLSH T16845950277F89119F5F36F309DB942A4DA76BC52AF39C64F3684324E1E71B809A21763
- MD5 SHA1 SHA512 SSDEEP TLSH
Score6/10-
Adds Run key to start application
-
Checks installed software on the system
Looks up Uninstall key entries in the registry to enumerate software on the system.
-
Drops file in System32 directory