General
- Target 2026-08-21_c1c8a91ff8a55a1120665941e8b8cda1_elex_glassworm_remcos_smoke-loader_stealc_stop_tofsee
- Size 1.5MB
- Sample260821-ejfwmswwd1
- SHA256 23ddff00effd21f7be68b2854da26371b5c26c1700ca6325e80e6d00b5aff77b
- MD5 c1c8a91ff8a55a1120665941e8b8cda1
- SHA1 ffce241637cc8135a670fa6799800211b3500f55
- SHA512 d80a2358d35bbce7f2525b0c61bbdd82aaf44a9e17c539e02245a12687d8352ffbfbf8242d8eb7f98679bed1787fb0a405cbfc6a26b2a210f0e85fd6f71d994d
- SSDEEP 6144:EwynAtMrOVRkidy9yIGWlUivfekAXODQJUEnj7HmGLGDtnx4bYcOzrBCqtwpaGUW:EwKfOVRo9yRYND0/GGlkzNUJ
- TLSH T17D65F9017AD8D425F2F357309D7A82B426257D165FA4CA8F334ABB8F7EF1A408E61316
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
6/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-08-21_c1c8a91ff8a55a1120665941e8b8cda1_elex_glassworm_remcos_smoke-loader_stealc_stop_tofsee.exe
Resource
win10v2004-20260513-en
8 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-08-21_c1c8a91ff8a55a1120665941e8b8cda1_elex_glassworm_remcos_smoke-loader_stealc_stop_tofsee.exe
Resource
win11ltsc2024-20260709-en
8 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-08-21_c1c8a91ff8a55a1120665941e8b8cda1_elex_glassworm_remcos_smoke-loader_stealc_stop_tofsee
- Size 1.5MB
- SHA256 23ddff00effd21f7be68b2854da26371b5c26c1700ca6325e80e6d00b5aff77b
- MD5 c1c8a91ff8a55a1120665941e8b8cda1
- SHA1 ffce241637cc8135a670fa6799800211b3500f55
- SHA512 d80a2358d35bbce7f2525b0c61bbdd82aaf44a9e17c539e02245a12687d8352ffbfbf8242d8eb7f98679bed1787fb0a405cbfc6a26b2a210f0e85fd6f71d994d
- SSDEEP 6144:EwynAtMrOVRkidy9yIGWlUivfekAXODQJUEnj7HmGLGDtnx4bYcOzrBCqtwpaGUW:EwKfOVRo9yRYND0/GGlkzNUJ
- TLSH T17D65F9017AD8D425F2F357309D7A82B426257D165FA4CA8F334ABB8F7EF1A408E61316
- MD5 SHA1 SHA512 SSDEEP TLSH
Score6/10-
Adds Run key to start application
-
Checks installed software on the system
Looks up Uninstall key entries in the registry to enumerate software on the system.
-
Drops file in System32 directory