General
- Target 2026-08-20_904113d086ad7fe42d1619babb9d8ba7_elex_glassworm_remcos_smoke-loader_stealc_stop_tofsee
- Size 785KB
- Sample260820-3vepqa1wey
- SHA256 4b8ff7afcb2eedf67739450a997d075080e584003f630c4584702229b181973f
- MD5 904113d086ad7fe42d1619babb9d8ba7
- SHA1 a30e6f8f364607ec94134c8fcd81a6ea1db07ed9
- SHA512 333ce8df1bdf06c9c40d4bfc94ba50abc6949c3b736febc132ea76f7eb44c31150d396ef7b94557b7634aad5a41563ca1e7bc40d8fdeae88ee16b2a10ca2d096
- SSDEEP 12288:WwKfOVRo9yRYIN797B4O8b8ITDnl/rv8Tx5KPTx5KE8XBL6QH:WxWVeyRYIN797B4O8b8ITDnl/OBL6QH
- TLSH T1F105293562848F31D56F353049628E647A27AC224EE04BEB76AC3F0D7B752B1DD2261F
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
6/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-08-20_904113d086ad7fe42d1619babb9d8ba7_elex_glassworm_remcos_smoke-loader_stealc_stop_tofsee.exe
Resource
win10v2004-20260513-en
8 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-08-20_904113d086ad7fe42d1619babb9d8ba7_elex_glassworm_remcos_smoke-loader_stealc_stop_tofsee.exe
Resource
win11ltsc2024-20260709-en
8 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-08-20_904113d086ad7fe42d1619babb9d8ba7_elex_glassworm_remcos_smoke-loader_stealc_stop_tofsee
- Size 785KB
- SHA256 4b8ff7afcb2eedf67739450a997d075080e584003f630c4584702229b181973f
- MD5 904113d086ad7fe42d1619babb9d8ba7
- SHA1 a30e6f8f364607ec94134c8fcd81a6ea1db07ed9
- SHA512 333ce8df1bdf06c9c40d4bfc94ba50abc6949c3b736febc132ea76f7eb44c31150d396ef7b94557b7634aad5a41563ca1e7bc40d8fdeae88ee16b2a10ca2d096
- SSDEEP 12288:WwKfOVRo9yRYIN797B4O8b8ITDnl/rv8Tx5KPTx5KE8XBL6QH:WxWVeyRYIN797B4O8b8ITDnl/OBL6QH
- TLSH T1F105293562848F31D56F353049628E647A27AC224EE04BEB76AC3F0D7B752B1DD2261F
- MD5 SHA1 SHA512 SSDEEP TLSH
Score6/10-
Adds Run key to start application
-
Checks installed software on the system
Looks up Uninstall key entries in the registry to enumerate software on the system.
-
Drops file in System32 directory