General
- Target 2026-08-25_c8c1c61e7990da1abb49cc3712606086_elex_glassworm_remcos_smoke-loader_stealc_stop_tofsee
- Size 2.9MB
- Sample260826-lqltsscf36
- SHA256 56a00d9879c012ac0fba79f5c8adc9d3b991d628f1668f18df9fedbfee3cb0e7
- MD5 c8c1c61e7990da1abb49cc3712606086
- SHA1 70c25a7990244d2d593e804dc14704074289f4d0
- SHA512 bbdffb8207a2803a189fec27db7185746d9a46b96a1d00bdd8f3582952669fe9cb15581f9d3ac6dae79a360026b451fe6afdee74e05468f275710565d0b041f2
- SSDEEP 24576:JxWVeyRY14s2hzntVIJqQPe0bQBEUOnXFqqcYxe10FgFl9N1:J8Y1zuzntVxQPeuQBEUOnXFqqcYx8hN1
- TLSH T190E5B3C37EE0B513E0A2CE303976A57D55277C6E9E62828F314FF31E5B366809A25712
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
6/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-08-25_c8c1c61e7990da1abb49cc3712606086_elex_glassworm_remcos_smoke-loader_stealc_stop_tofsee.exe
Resource
win10v2004-20260513-en
8 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-08-25_c8c1c61e7990da1abb49cc3712606086_elex_glassworm_remcos_smoke-loader_stealc_stop_tofsee.exe
Resource
win11ltsc2024-20260709-en
8 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-08-25_c8c1c61e7990da1abb49cc3712606086_elex_glassworm_remcos_smoke-loader_stealc_stop_tofsee
- Size 2.9MB
- SHA256 56a00d9879c012ac0fba79f5c8adc9d3b991d628f1668f18df9fedbfee3cb0e7
- MD5 c8c1c61e7990da1abb49cc3712606086
- SHA1 70c25a7990244d2d593e804dc14704074289f4d0
- SHA512 bbdffb8207a2803a189fec27db7185746d9a46b96a1d00bdd8f3582952669fe9cb15581f9d3ac6dae79a360026b451fe6afdee74e05468f275710565d0b041f2
- SSDEEP 24576:JxWVeyRY14s2hzntVIJqQPe0bQBEUOnXFqqcYxe10FgFl9N1:J8Y1zuzntVxQPeuQBEUOnXFqqcYx8hN1
- TLSH T190E5B3C37EE0B513E0A2CE303976A57D55277C6E9E62828F314FF31E5B366809A25712
- MD5 SHA1 SHA512 SSDEEP TLSH
Score6/10-
Adds Run key to start application
-
Checks installed software on the system
Looks up Uninstall key entries in the registry to enumerate software on the system.
-
Drops file in System32 directory