General
- Target 2026-08-21_828e04b38a1768cf7b521c3b7e6640cd_elex_glassworm_remcos_smoke-loader_stealc_stop_tofsee
- Size 1.0MB
- Sample260822-nqe3csysds
- SHA256 c197f0a263edba76e1e5a7e256d8e44f5efe67d0f59c51d41a38822298dc83a7
- MD5 828e04b38a1768cf7b521c3b7e6640cd
- SHA1 96f79456c4df2bcba3b4eff4ded423c5965341eb
- SHA512 1d08ff38c879fcf3f99ae3ba0eaeb3d31a4818d1b91116dc3efc57267e568f9ff684d0cac54afce5745b73cfbcab8d13abe1605a3f9483fd8a0b8c38fa66865b
- SSDEEP 24576:RxWVeyRYrF+797i4O8b8ITDnlBrqZ1kud:R8Yrz4O8b8ITDnla1km
- TLSH T1DA35C8226FF89A25F2FB2630C5714E6529677D129EB4878B32483F1A7B70570C9E4723
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
8/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-08-21_828e04b38a1768cf7b521c3b7e6640cd_elex_glassworm_remcos_smoke-loader_stealc_stop_tofsee.exe
Resource
win10v2004-20260513-en
8 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-08-21_828e04b38a1768cf7b521c3b7e6640cd_elex_glassworm_remcos_smoke-loader_stealc_stop_tofsee.exe
Resource
win11ltsc2024-20260709-en
9 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-08-21_828e04b38a1768cf7b521c3b7e6640cd_elex_glassworm_remcos_smoke-loader_stealc_stop_tofsee
- Size 1.0MB
- SHA256 c197f0a263edba76e1e5a7e256d8e44f5efe67d0f59c51d41a38822298dc83a7
- MD5 828e04b38a1768cf7b521c3b7e6640cd
- SHA1 96f79456c4df2bcba3b4eff4ded423c5965341eb
- SHA512 1d08ff38c879fcf3f99ae3ba0eaeb3d31a4818d1b91116dc3efc57267e568f9ff684d0cac54afce5745b73cfbcab8d13abe1605a3f9483fd8a0b8c38fa66865b
- SSDEEP 24576:RxWVeyRYrF+797i4O8b8ITDnlBrqZ1kud:R8Yrz4O8b8ITDnla1km
- TLSH T1DA35C8226FF89A25F2FB2630C5714E6529677D129EB4878B32483F1A7B70570C9E4723
- MD5 SHA1 SHA512 SSDEEP TLSH
Score8/10-
Drops file in Drivers directory
-
Adds Run key to start application
-
Checks installed software on the system
Looks up Uninstall key entries in the registry to enumerate software on the system.
-
Drops file in System32 directory