General
- Target 2026-08-21_e74cb4a9311c5ab109f4e7967f7bcca5_elex_glassworm_remcos_smoke-loader_stealc_stop_tofsee
- Size 11.0MB
- Sample260822-awsnratzcs
- SHA256 00386471d1228d717d715b9fc47bd2b16d846613aed4ee656af752e7f178bb17
- MD5 e74cb4a9311c5ab109f4e7967f7bcca5
- SHA1 198082f8d155787b02768c084e88e83e7d07fdbe
- SHA512 93d67190682e7b4146d6aa4771dc2f4bc05ee72533779be85e261ef9de59a84247b2aa42672c8a899e8999c8119af3e8ad8f920ef659ca3724a13fa90d888856
- SSDEEP 196608:O+bz9WjDKB0hGwPofKsIkzHLqj2L3FCGSAj1:LIDKBqGIDgcowGLB
- TLSH T1FAC6F11667F94215F1B36F3089F61351DB36BD69AA38C70E3F84360E5E71BA09921B23
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
6/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-08-21_e74cb4a9311c5ab109f4e7967f7bcca5_elex_glassworm_remcos_smoke-loader_stealc_stop_tofsee.exe
Resource
win10v2004-20260513-en
8 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-08-21_e74cb4a9311c5ab109f4e7967f7bcca5_elex_glassworm_remcos_smoke-loader_stealc_stop_tofsee.exe
Resource
win11ltsc2024-20260709-en
8 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-08-21_e74cb4a9311c5ab109f4e7967f7bcca5_elex_glassworm_remcos_smoke-loader_stealc_stop_tofsee
- Size 11.0MB
- SHA256 00386471d1228d717d715b9fc47bd2b16d846613aed4ee656af752e7f178bb17
- MD5 e74cb4a9311c5ab109f4e7967f7bcca5
- SHA1 198082f8d155787b02768c084e88e83e7d07fdbe
- SHA512 93d67190682e7b4146d6aa4771dc2f4bc05ee72533779be85e261ef9de59a84247b2aa42672c8a899e8999c8119af3e8ad8f920ef659ca3724a13fa90d888856
- SSDEEP 196608:O+bz9WjDKB0hGwPofKsIkzHLqj2L3FCGSAj1:LIDKBqGIDgcowGLB
- TLSH T1FAC6F11667F94215F1B36F3089F61351DB36BD69AA38C70E3F84360E5E71BA09921B23
- MD5 SHA1 SHA512 SSDEEP TLSH
Score6/10-
Adds Run key to start application
-
Checks installed software on the system
Looks up Uninstall key entries in the registry to enumerate software on the system.
-
Drops file in System32 directory