General
- Target 2026-08-21_b6f6b367e9ffbe70c395e7b7642410d3_elex_glassworm_remcos_smoke-loader_stealc_stop_tofsee
- Size 12.1MB
- Sample260822-h9ecaascrg
- SHA256 9eaf7bba3b9b3a5c48ba9c14ed263cf457ef4cf98ebfc3a5f6ba9a5f8ae7a573
- MD5 b6f6b367e9ffbe70c395e7b7642410d3
- SHA1 e5305486c44ce01ce1a6f220e1295adcf91d75fc
- SHA512 cb8db5d3ae435c2d535d06a09568daa408751a898858455e89776af7ad18930b509203213b2ddbd63076e0127210decf31932c6089377c0711c8a34eb18c1665
- SSDEEP 196608:Ujz9WjDKB0hGwPofKsIkzHLqj2L3FCGSAjS:QIDKBqGIDgcowGLG
- TLSH T172D6D01567E44235F0B21E3089B58399E635BD19E9278F0B2A407ECDBFF0B905991B3E
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
6/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-08-21_b6f6b367e9ffbe70c395e7b7642410d3_elex_glassworm_remcos_smoke-loader_stealc_stop_tofsee.exe
Resource
win10v2004-20260513-en
8 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-08-21_b6f6b367e9ffbe70c395e7b7642410d3_elex_glassworm_remcos_smoke-loader_stealc_stop_tofsee.exe
Resource
win11ltsc2024-20260709-en
8 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-08-21_b6f6b367e9ffbe70c395e7b7642410d3_elex_glassworm_remcos_smoke-loader_stealc_stop_tofsee
- Size 12.1MB
- SHA256 9eaf7bba3b9b3a5c48ba9c14ed263cf457ef4cf98ebfc3a5f6ba9a5f8ae7a573
- MD5 b6f6b367e9ffbe70c395e7b7642410d3
- SHA1 e5305486c44ce01ce1a6f220e1295adcf91d75fc
- SHA512 cb8db5d3ae435c2d535d06a09568daa408751a898858455e89776af7ad18930b509203213b2ddbd63076e0127210decf31932c6089377c0711c8a34eb18c1665
- SSDEEP 196608:Ujz9WjDKB0hGwPofKsIkzHLqj2L3FCGSAjS:QIDKBqGIDgcowGLG
- TLSH T172D6D01567E44235F0B21E3089B58399E635BD19E9278F0B2A407ECDBFF0B905991B3E
- MD5 SHA1 SHA512 SSDEEP TLSH
Score6/10-
Adds Run key to start application
-
Checks installed software on the system
Looks up Uninstall key entries in the registry to enumerate software on the system.
-
Drops file in System32 directory