General
- Target 2026-08-23_082a631568806d1debc660f81a106bd9_elex_glassworm_remcos_smoke-loader_stealc_stop_tofsee
- Size 2.5MB
- Sample260824-wd2pla1fpb
- SHA256 9ef32779691851ab3ade77710c06e291e06d7483ae8d6c800b9199bef28c0109
- MD5 082a631568806d1debc660f81a106bd9
- SHA1 808b86579f79f5ac5684375dc8bd3ded6f17e211
- SHA512 53e1f20d873dc95cfa7fe90e7f6245b18fb051b0fc47bd865f97bf2a9ba31726fd8caa561e0b9545ec6dc8e7af0376d62d4e4da4700faa97c732c4bc1c11f3da
- SSDEEP 12288:dwKfOVRo9yRYp42X5sUSF14tsCI0GVbYwbk8Qhzj4IkQWbTqWLsW2swI:dxWVeyRYp4s2hzneKhwI
- TLSH T1D4C53021A2E4C135F1B76A30D87582F92527BC56EA379D0F2144BD9D7FB079089A0B3E
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
6/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-08-23_082a631568806d1debc660f81a106bd9_elex_glassworm_remcos_smoke-loader_stealc_stop_tofsee.exe
Resource
win10v2004-20260513-en
8 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-08-23_082a631568806d1debc660f81a106bd9_elex_glassworm_remcos_smoke-loader_stealc_stop_tofsee.exe
Resource
win11ltsc2024-20260709-en
8 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-08-23_082a631568806d1debc660f81a106bd9_elex_glassworm_remcos_smoke-loader_stealc_stop_tofsee
- Size 2.5MB
- SHA256 9ef32779691851ab3ade77710c06e291e06d7483ae8d6c800b9199bef28c0109
- MD5 082a631568806d1debc660f81a106bd9
- SHA1 808b86579f79f5ac5684375dc8bd3ded6f17e211
- SHA512 53e1f20d873dc95cfa7fe90e7f6245b18fb051b0fc47bd865f97bf2a9ba31726fd8caa561e0b9545ec6dc8e7af0376d62d4e4da4700faa97c732c4bc1c11f3da
- SSDEEP 12288:dwKfOVRo9yRYp42X5sUSF14tsCI0GVbYwbk8Qhzj4IkQWbTqWLsW2swI:dxWVeyRYp4s2hzneKhwI
- TLSH T1D4C53021A2E4C135F1B76A30D87582F92527BC56EA379D0F2144BD9D7FB079089A0B3E
- MD5 SHA1 SHA512 SSDEEP TLSH
Score6/10-
Adds Run key to start application
-
Checks installed software on the system
Looks up Uninstall key entries in the registry to enumerate software on the system.
-
Drops file in System32 directory