General
- Target 2026-08-25_7836feeecc3877ed43485297dbea1bf2_elex_glassworm_remcos_smoke-loader_stealc_stop_tofsee
- Size 1.7MB
- Sample260826-znfrnatvey
- SHA256 a34dbe38764810d8383c55a76fc82e87a950695b6b8678187932d392d91505b5
- MD5 7836feeecc3877ed43485297dbea1bf2
- SHA1 5e6df9d99c98a8cfd46ca1329911b9354e41ff07
- SHA512 6a479ad7d3945e9ed0e503453e8079d24d07764ca127d7f0026c0120bc0a09115b078e27cd61139186d287bd8c7b74bf4b11388ba36aef4f6d951476c60b5947
- SSDEEP 24576:SxWVeyRYy4s2hz6c4O8b8ITDnl9F03M5WSYV:S8YyzuzP4O8b8ITDnl9F03M5o
- TLSH T14685C421B3F98115F5F37B709D764AA02A76BC62EE75864E3248371D1F70AA0C960B37
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
6/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-08-25_7836feeecc3877ed43485297dbea1bf2_elex_glassworm_remcos_smoke-loader_stealc_stop_tofsee.exe
Resource
win10v2004-20260513-en
8 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-08-25_7836feeecc3877ed43485297dbea1bf2_elex_glassworm_remcos_smoke-loader_stealc_stop_tofsee.exe
Resource
win11ltsc2024-20260709-en
8 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-08-25_7836feeecc3877ed43485297dbea1bf2_elex_glassworm_remcos_smoke-loader_stealc_stop_tofsee
- Size 1.7MB
- SHA256 a34dbe38764810d8383c55a76fc82e87a950695b6b8678187932d392d91505b5
- MD5 7836feeecc3877ed43485297dbea1bf2
- SHA1 5e6df9d99c98a8cfd46ca1329911b9354e41ff07
- SHA512 6a479ad7d3945e9ed0e503453e8079d24d07764ca127d7f0026c0120bc0a09115b078e27cd61139186d287bd8c7b74bf4b11388ba36aef4f6d951476c60b5947
- SSDEEP 24576:SxWVeyRYy4s2hz6c4O8b8ITDnl9F03M5WSYV:S8YyzuzP4O8b8ITDnl9F03M5o
- TLSH T14685C421B3F98115F5F37B709D764AA02A76BC62EE75864E3248371D1F70AA0C960B37
- MD5 SHA1 SHA512 SSDEEP TLSH
Score6/10-
Adds Run key to start application
-
Checks installed software on the system
Looks up Uninstall key entries in the registry to enumerate software on the system.
-
Drops file in System32 directory