General
- Target 2026-08-21_770de951ac8d4db4a5ff4d3cc6078578_elex_glassworm_remcos_smoke-loader_stealc_stop_tofsee
- Size 2.6MB
- Sample260822-plcxwathmg
- SHA256 6c49774d6961af87c73a3d8f36a0cf4abe15986d7cea09288ab26f5b7137b676
- MD5 770de951ac8d4db4a5ff4d3cc6078578
- SHA1 55653f1aa3f0e22d92d1819adadbcba46c24e072
- SHA512 76502fc262ceac1d1cad8f3a5d0c736e8603e7fc3c2cfe8084d95579cf688500374c605064a6e06d1f509bbd7d05222caab4d2db46d893abd8115aac21f338f3
- SSDEEP 24576:/xWVeyRYLC4s2hzntVIJq84O8b8ITDnltA4mljXxe10FgW:/8YWzuzntVx84O8b8ITDnltAHljXx8y
- TLSH T18BC51713B6E58117F1F3F73099B5867426227C4E9BB5828E724DB74F5B70A90CE22722
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
6/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-08-21_770de951ac8d4db4a5ff4d3cc6078578_elex_glassworm_remcos_smoke-loader_stealc_stop_tofsee.exe
Resource
win10v2004-20260513-en
8 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-08-21_770de951ac8d4db4a5ff4d3cc6078578_elex_glassworm_remcos_smoke-loader_stealc_stop_tofsee.exe
Resource
win11ltsc2024-20260709-en
8 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-08-21_770de951ac8d4db4a5ff4d3cc6078578_elex_glassworm_remcos_smoke-loader_stealc_stop_tofsee
- Size 2.6MB
- SHA256 6c49774d6961af87c73a3d8f36a0cf4abe15986d7cea09288ab26f5b7137b676
- MD5 770de951ac8d4db4a5ff4d3cc6078578
- SHA1 55653f1aa3f0e22d92d1819adadbcba46c24e072
- SHA512 76502fc262ceac1d1cad8f3a5d0c736e8603e7fc3c2cfe8084d95579cf688500374c605064a6e06d1f509bbd7d05222caab4d2db46d893abd8115aac21f338f3
- SSDEEP 24576:/xWVeyRYLC4s2hzntVIJq84O8b8ITDnltA4mljXxe10FgW:/8YWzuzntVx84O8b8ITDnltAHljXx8y
- TLSH T18BC51713B6E58117F1F3F73099B5867426227C4E9BB5828E724DB74F5B70A90CE22722
- MD5 SHA1 SHA512 SSDEEP TLSH
Score6/10-
Adds Run key to start application
-
Checks installed software on the system
Looks up Uninstall key entries in the registry to enumerate software on the system.
-
Drops file in System32 directory