General
- Target 2026-08-25_c0d4155c33bf408fd3700a9825f4a614_elex_glassworm_remcos_smoke-loader_stealc_stop_tofsee
- Size 2.0MB
- Sample260826-m5rt2acm3z
- SHA256 038f465a5f69da4121eed609e5aa3ad570d277add04076967e5b31f1aa922f78
- MD5 c0d4155c33bf408fd3700a9825f4a614
- SHA1 7524cf59ea8cd16554d3e53e2a48ac040bc592c9
- SHA512 ef42cb5028582bba8e54b86739ac4d9edc2183819b09ef8742c7deb4f9f4a1a03e2fc7bf0449a3ff1e7065d018f902b73595ced6490e84edb80499aee46239ec
- SSDEEP 24576:CxWVeyRY4JB+4O8b8ITDnl4FC+Sru3WzG:C8YSM4O8b8ITDnl4FcrhzG
- TLSH T1FAA5946173F89129F5F26B309EF68BA56A27BD515E35C60F3644374E1A31AA0DE20333
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
6/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-08-25_c0d4155c33bf408fd3700a9825f4a614_elex_glassworm_remcos_smoke-loader_stealc_stop_tofsee.exe
Resource
win10v2004-20260513-en
8 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-08-25_c0d4155c33bf408fd3700a9825f4a614_elex_glassworm_remcos_smoke-loader_stealc_stop_tofsee.exe
Resource
win11ltsc2024-20260710-en
8 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-08-25_c0d4155c33bf408fd3700a9825f4a614_elex_glassworm_remcos_smoke-loader_stealc_stop_tofsee
- Size 2.0MB
- SHA256 038f465a5f69da4121eed609e5aa3ad570d277add04076967e5b31f1aa922f78
- MD5 c0d4155c33bf408fd3700a9825f4a614
- SHA1 7524cf59ea8cd16554d3e53e2a48ac040bc592c9
- SHA512 ef42cb5028582bba8e54b86739ac4d9edc2183819b09ef8742c7deb4f9f4a1a03e2fc7bf0449a3ff1e7065d018f902b73595ced6490e84edb80499aee46239ec
- SSDEEP 24576:CxWVeyRY4JB+4O8b8ITDnl4FC+Sru3WzG:C8YSM4O8b8ITDnl4FcrhzG
- TLSH T1FAA5946173F89129F5F26B309EF68BA56A27BD515E35C60F3644374E1A31AA0DE20333
- MD5 SHA1 SHA512 SSDEEP TLSH
Score6/10-
Adds Run key to start application
-
Checks installed software on the system
Looks up Uninstall key entries in the registry to enumerate software on the system.
-
Drops file in System32 directory