General
- Target 2026-08-23_98fbe369406927cf7fb946ed57376b33_elex_glassworm_remcos_smoke-loader_stealc_stop_tofsee
- Size 1.2MB
- Sample260825-26lrqszfjb
- SHA256 7fa9e8351b4feeefbf4a2f45ed67eb9d9f7900c042d9f3abfa3b7f0274a40cea
- MD5 98fbe369406927cf7fb946ed57376b33
- SHA1 86b18ad60ad7b0ee46f9e10c62cba6e5acaaf11b
- SHA512 1e01499fce820953bc1d1110b1e0eaa0edd3bc9564b123f87b290f50a75206dc1475958cb0f92ba82c84604d9c8c93f396975059550ca725cfcaf9417cf2febc
- SSDEEP 24576:4xWVeyRY0Y4s2hzhz4O8b8ITDnljF2l6ig2+5+Z9:48YxzuzB4O8b8ITDnljF2l6ig2+5S
- TLSH T1FF450821B3E5C025F5F73B309D768AA42A26BC526EB5C24F364C371E6F716A0DD20726
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
6/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-08-23_98fbe369406927cf7fb946ed57376b33_elex_glassworm_remcos_smoke-loader_stealc_stop_tofsee.exe
Resource
win10v2004-20260513-en
8 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-08-23_98fbe369406927cf7fb946ed57376b33_elex_glassworm_remcos_smoke-loader_stealc_stop_tofsee.exe
Resource
win11ltsc2024-20260709-en
8 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-08-23_98fbe369406927cf7fb946ed57376b33_elex_glassworm_remcos_smoke-loader_stealc_stop_tofsee
- Size 1.2MB
- SHA256 7fa9e8351b4feeefbf4a2f45ed67eb9d9f7900c042d9f3abfa3b7f0274a40cea
- MD5 98fbe369406927cf7fb946ed57376b33
- SHA1 86b18ad60ad7b0ee46f9e10c62cba6e5acaaf11b
- SHA512 1e01499fce820953bc1d1110b1e0eaa0edd3bc9564b123f87b290f50a75206dc1475958cb0f92ba82c84604d9c8c93f396975059550ca725cfcaf9417cf2febc
- SSDEEP 24576:4xWVeyRY0Y4s2hzhz4O8b8ITDnljF2l6ig2+5+Z9:48YxzuzB4O8b8ITDnljF2l6ig2+5S
- TLSH T1FF450821B3E5C025F5F73B309D768AA42A26BC526EB5C24F364C371E6F716A0DD20726
- MD5 SHA1 SHA512 SSDEEP TLSH
Score6/10-
Adds Run key to start application
-
Checks installed software on the system
Looks up Uninstall key entries in the registry to enumerate software on the system.
-
Drops file in System32 directory