General
- Target 2026-08-27_d8eedbe60d8c4510972367113fffa902_elex_glassworm_remcos_smoke-loader_stealc_stop_tofsee
- Size 2.9MB
- Sample260827-h77aaaem2v
- SHA256 70715f423aedffd7cb83869659bbb7206cb781fd6141fae4a7dbe67d9ca419f1
- MD5 d8eedbe60d8c4510972367113fffa902
- SHA1 9cab1066d035f5e2c06724318c69d6a565eccf2c
- SHA512 f45a2552a4f8e80a7a6496a8bfd786177cca11612f3ce112af7b7e0cf83a1e20c8558e0b6739d26e009030177930ebaf59a857bd86bd83d2cda263f7ba523fa2
- SSDEEP 24576:HxWVeyRYGJ4s2hzntVIJq8Pe0bQBEUOnXFKqczxe10FgFl9NR:H8YizuzntVx8PeuQBEUOnXFKqczx8hNR
- TLSH T134E5A2C37EE0B513E0A2DE303975A57D55277CAE9A72828F314FF31E5B366808A25712
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
8/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-08-27_d8eedbe60d8c4510972367113fffa902_elex_glassworm_remcos_smoke-loader_stealc_stop_tofsee.exe
Resource
win10v2004-20260513-en
8 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-08-27_d8eedbe60d8c4510972367113fffa902_elex_glassworm_remcos_smoke-loader_stealc_stop_tofsee.exe
Resource
win11ltsc2024-20260709-en
9 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-08-27_d8eedbe60d8c4510972367113fffa902_elex_glassworm_remcos_smoke-loader_stealc_stop_tofsee
- Size 2.9MB
- SHA256 70715f423aedffd7cb83869659bbb7206cb781fd6141fae4a7dbe67d9ca419f1
- MD5 d8eedbe60d8c4510972367113fffa902
- SHA1 9cab1066d035f5e2c06724318c69d6a565eccf2c
- SHA512 f45a2552a4f8e80a7a6496a8bfd786177cca11612f3ce112af7b7e0cf83a1e20c8558e0b6739d26e009030177930ebaf59a857bd86bd83d2cda263f7ba523fa2
- SSDEEP 24576:HxWVeyRYGJ4s2hzntVIJq8Pe0bQBEUOnXFKqczxe10FgFl9NR:H8YizuzntVx8PeuQBEUOnXFKqczx8hNR
- TLSH T134E5A2C37EE0B513E0A2DE303975A57D55277CAE9A72828F314FF31E5B366808A25712
- MD5 SHA1 SHA512 SSDEEP TLSH
Score8/10-
Drops file in Drivers directory
-
Adds Run key to start application
-
Checks installed software on the system
Looks up Uninstall key entries in the registry to enumerate software on the system.
-
Drops file in System32 directory