General
- Target 2026-08-22_b8b2e0c44d9da76fa616e8eef224a762_coinminer_elex_glassworm_remcos_smoke-loader_stealc_stop_tofsee
- Size 937KB
- Sample260823-b7j2esdm41
- SHA256 7f173ab74df8d26e15ea3696b2649dec0e4a90f7ebde7b335cd96586770ecb7c
- MD5 b8b2e0c44d9da76fa616e8eef224a762
- SHA1 1cce992888be256e4a662ea370d743a0ab73a685
- SHA512 9f7ddc93b3e9eeeb1fc4e2a26eb65513637a57e30055b58f7ac64c19f4e8fe51f9211c0686b0898cf529b99678c54b8bdb4e9b7892e852e5a4a2ec1ed09176fd
- SSDEEP 12288:3wKfOVRo9yRYqILml4O8b8ITDnlr08LcB:3xWVeyRYVLml4O8b8ITDnl3cB
- TLSH T15815F926F2B4C020D5A27E3009BA8D60F535FC16DAE0A6D7728C3B1E5F72BA1DD25356
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
6/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-08-22_b8b2e0c44d9da76fa616e8eef224a762_coinminer_elex_glassworm_remcos_smoke-loader_stealc_stop_tofsee.exe
Resource
win10v2004-20260513-en
8 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-08-22_b8b2e0c44d9da76fa616e8eef224a762_coinminer_elex_glassworm_remcos_smoke-loader_stealc_stop_tofsee.exe
Resource
win11ltsc2024-20260709-en
8 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-08-22_b8b2e0c44d9da76fa616e8eef224a762_coinminer_elex_glassworm_remcos_smoke-loader_stealc_stop_tofsee
- Size 937KB
- SHA256 7f173ab74df8d26e15ea3696b2649dec0e4a90f7ebde7b335cd96586770ecb7c
- MD5 b8b2e0c44d9da76fa616e8eef224a762
- SHA1 1cce992888be256e4a662ea370d743a0ab73a685
- SHA512 9f7ddc93b3e9eeeb1fc4e2a26eb65513637a57e30055b58f7ac64c19f4e8fe51f9211c0686b0898cf529b99678c54b8bdb4e9b7892e852e5a4a2ec1ed09176fd
- SSDEEP 12288:3wKfOVRo9yRYqILml4O8b8ITDnlr08LcB:3xWVeyRYVLml4O8b8ITDnl3cB
- TLSH T15815F926F2B4C020D5A27E3009BA8D60F535FC16DAE0A6D7728C3B1E5F72BA1DD25356
- MD5 SHA1 SHA512 SSDEEP TLSH
Score6/10-
Adds Run key to start application
-
Checks installed software on the system
Looks up Uninstall key entries in the registry to enumerate software on the system.
-
Drops file in System32 directory