General
- Target 2026-08-22_95999306f02d3b582f5bbf2dfd78c523_elex_glassworm_remcos_smoke-loader_stealc_stop_tofsee
- Size 1.2MB
- Sample260822-edv4daep6z
- SHA256 5b234880c6dcf32deda6a359bc0d43406e34613d22cdad4457f8c89d72f2cdd3
- MD5 95999306f02d3b582f5bbf2dfd78c523
- SHA1 d50832b50029981e8a33a6fbee29b17ed6c10d4c
- SHA512 19b65fdfef8a6d7168525dcfcd6f7ea828150e9ffd0f884aba6f4b0301e9611f5ce30392f4054f2f67316741a5a36c37df49c6e0e20c34a639e5c5972633cead
- SSDEEP 12288:gwKfOVRo9yRYZKOiLmA4O8b8ITDnlr046A/6i:gxWVeyRY7iLmA4O8b8ITDnln4i
- TLSH T19D551A23A1D8C0D0D45A2E30CD6ABAF8E5357C01D9A48E977D48BF0D7B713A199B722D
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
6/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-08-22_95999306f02d3b582f5bbf2dfd78c523_elex_glassworm_remcos_smoke-loader_stealc_stop_tofsee.exe
Resource
win10v2004-20260513-en
8 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-08-22_95999306f02d3b582f5bbf2dfd78c523_elex_glassworm_remcos_smoke-loader_stealc_stop_tofsee.exe
Resource
win11ltsc2024-20260709-en
8 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-08-22_95999306f02d3b582f5bbf2dfd78c523_elex_glassworm_remcos_smoke-loader_stealc_stop_tofsee
- Size 1.2MB
- SHA256 5b234880c6dcf32deda6a359bc0d43406e34613d22cdad4457f8c89d72f2cdd3
- MD5 95999306f02d3b582f5bbf2dfd78c523
- SHA1 d50832b50029981e8a33a6fbee29b17ed6c10d4c
- SHA512 19b65fdfef8a6d7168525dcfcd6f7ea828150e9ffd0f884aba6f4b0301e9611f5ce30392f4054f2f67316741a5a36c37df49c6e0e20c34a639e5c5972633cead
- SSDEEP 12288:gwKfOVRo9yRYZKOiLmA4O8b8ITDnlr046A/6i:gxWVeyRY7iLmA4O8b8ITDnln4i
- TLSH T19D551A23A1D8C0D0D45A2E30CD6ABAF8E5357C01D9A48E977D48BF0D7B713A199B722D
- MD5 SHA1 SHA512 SSDEEP TLSH
Score6/10-
Adds Run key to start application
-
Checks installed software on the system
Looks up Uninstall key entries in the registry to enumerate software on the system.
-
Drops file in System32 directory