General
- Target 2026-08-25_d628e7e3e8064e694a52acad6c23096b_elex_glassworm_remcos_smoke-loader_stealc_stop_tofsee
- Size 1.5MB
- Sample260826-h5cmwsaj31
- SHA256 815fe614b5d4250edecfa68027a12ef1e9b337de628f13499ac81e492cb7f317
- MD5 d628e7e3e8064e694a52acad6c23096b
- SHA1 f6f148025c5b091c14235af76ae8e3bc960047db
- SHA512 73bfa2f2a433e1cb5cffe4c43d00370b7485edaf5f0f46cbd0fb472cc449f19b85fe2b9d22e2b417a959d428ce3f234f6319a8aec3858c13b87bde18c41c5a2a
- SSDEEP 24576:oxWVeyRYB4s2hzhz4O8b8ITDnljFQkj+5MZG:o8YBzuzB4O8b8ITDnljFQkj+5/
- TLSH T18975A361A3F98515F5F73B305DB64AA02A26BC52AE79C34F32483B1E6F71A50DD20723
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
6/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-08-25_d628e7e3e8064e694a52acad6c23096b_elex_glassworm_remcos_smoke-loader_stealc_stop_tofsee.exe
Resource
win10v2004-20260513-en
8 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-08-25_d628e7e3e8064e694a52acad6c23096b_elex_glassworm_remcos_smoke-loader_stealc_stop_tofsee.exe
Resource
win11ltsc2024-20260709-en
8 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-08-25_d628e7e3e8064e694a52acad6c23096b_elex_glassworm_remcos_smoke-loader_stealc_stop_tofsee
- Size 1.5MB
- SHA256 815fe614b5d4250edecfa68027a12ef1e9b337de628f13499ac81e492cb7f317
- MD5 d628e7e3e8064e694a52acad6c23096b
- SHA1 f6f148025c5b091c14235af76ae8e3bc960047db
- SHA512 73bfa2f2a433e1cb5cffe4c43d00370b7485edaf5f0f46cbd0fb472cc449f19b85fe2b9d22e2b417a959d428ce3f234f6319a8aec3858c13b87bde18c41c5a2a
- SSDEEP 24576:oxWVeyRYB4s2hzhz4O8b8ITDnljFQkj+5MZG:o8YBzuzB4O8b8ITDnljFQkj+5/
- TLSH T18975A361A3F98515F5F73B305DB64AA02A26BC52AE79C34F32483B1E6F71A50DD20723
- MD5 SHA1 SHA512 SSDEEP TLSH
Score6/10-
Adds Run key to start application
-
Checks installed software on the system
Looks up Uninstall key entries in the registry to enumerate software on the system.
-
Drops file in System32 directory