General
- Target 2026-08-17_c140bc8888321f35edf47d1328dbf447_elex_glassworm_remcos_smoke-loader_stealc_stop_tofsee
- Size 1.1MB
- Sample260817-1a2yeazdnd
- SHA256 08b9773d963afee796a33012cbe5c8d20d166028cd283eac32a090a60896b413
- MD5 c140bc8888321f35edf47d1328dbf447
- SHA1 8a26101b8c3969e125ad67a2a791c67d80e91661
- SHA512 182f16511470443134817bf9d98a2a7cb8d0f35a3039f83cb269241dff1fd6bae27c7e72b8646bac07a9d6db14d705adec35420570fe4e00fa41c11373934638
- SSDEEP 12288:fwKfOVRo9yRYcQYwzYDteYIpREn0tQa7XTfb:fxWVeyRYcbwzYDteYIp6TaPfb
- TLSH T11445950277F89119F5F36F309DB942A4DA76BC526F39C64F3688324E1E71B809A21763
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
6/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-08-17_c140bc8888321f35edf47d1328dbf447_elex_glassworm_remcos_smoke-loader_stealc_stop_tofsee.exe
Resource
win10v2004-20260513-en
8 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-08-17_c140bc8888321f35edf47d1328dbf447_elex_glassworm_remcos_smoke-loader_stealc_stop_tofsee.exe
Resource
win11ltsc2024-20260709-en
8 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-08-17_c140bc8888321f35edf47d1328dbf447_elex_glassworm_remcos_smoke-loader_stealc_stop_tofsee
- Size 1.1MB
- SHA256 08b9773d963afee796a33012cbe5c8d20d166028cd283eac32a090a60896b413
- MD5 c140bc8888321f35edf47d1328dbf447
- SHA1 8a26101b8c3969e125ad67a2a791c67d80e91661
- SHA512 182f16511470443134817bf9d98a2a7cb8d0f35a3039f83cb269241dff1fd6bae27c7e72b8646bac07a9d6db14d705adec35420570fe4e00fa41c11373934638
- SSDEEP 12288:fwKfOVRo9yRYcQYwzYDteYIpREn0tQa7XTfb:fxWVeyRYcbwzYDteYIp6TaPfb
- TLSH T11445950277F89119F5F36F309DB942A4DA76BC526F39C64F3688324E1E71B809A21763
- MD5 SHA1 SHA512 SSDEEP TLSH
Score6/10-
Adds Run key to start application
-
Checks installed software on the system
Looks up Uninstall key entries in the registry to enumerate software on the system.
-
Drops file in System32 directory