General
- Target 2026-08-28_425553738fd8c761a1f56442fa26d663_elex_glassworm_remcos_smoke-loader_stealc_stop_tofsee
- Size 1.3MB
- Sample260828-wfxtes1fpd
- SHA256 1a6cdd20e0adcd9ae9d9ea44d9bc2eaba48f714105d316720cd12c7c62490eab
- MD5 425553738fd8c761a1f56442fa26d663
- SHA1 a7a3273bddf4913aa7a856e08ad7b0b08d8e19b9
- SHA512 763ac63938d2c279af0b4ebc89428302fb1cf74af04f355fb62e198a74c944a545050a74bda7c5467c86b7f18546996c5a1ac3fd4de47434e3758b6137040326
- SSDEEP 24576:cxWVeyRYcsEw44RE5E/jYKDB8U4jYY0td7kt+X83BrLme4O8b8ITDnllvXcc5j:c8Yww44RY4O8b8ITDnl1RB
- TLSH T181552B22FE9CD021D5A23E3009BA4E90EA357C517EE4969B798C371DEF713A1DC26316
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
6/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-08-28_425553738fd8c761a1f56442fa26d663_elex_glassworm_remcos_smoke-loader_stealc_stop_tofsee.exe
Resource
win10v2004-20260513-en
8 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-08-28_425553738fd8c761a1f56442fa26d663_elex_glassworm_remcos_smoke-loader_stealc_stop_tofsee.exe
Resource
win11ltsc2024-20260709-en
8 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-08-28_425553738fd8c761a1f56442fa26d663_elex_glassworm_remcos_smoke-loader_stealc_stop_tofsee
- Size 1.3MB
- SHA256 1a6cdd20e0adcd9ae9d9ea44d9bc2eaba48f714105d316720cd12c7c62490eab
- MD5 425553738fd8c761a1f56442fa26d663
- SHA1 a7a3273bddf4913aa7a856e08ad7b0b08d8e19b9
- SHA512 763ac63938d2c279af0b4ebc89428302fb1cf74af04f355fb62e198a74c944a545050a74bda7c5467c86b7f18546996c5a1ac3fd4de47434e3758b6137040326
- SSDEEP 24576:cxWVeyRYcsEw44RE5E/jYKDB8U4jYY0td7kt+X83BrLme4O8b8ITDnllvXcc5j:c8Yww44RY4O8b8ITDnl1RB
- TLSH T181552B22FE9CD021D5A23E3009BA4E90EA357C517EE4969B798C371DEF713A1DC26316
- MD5 SHA1 SHA512 SSDEEP TLSH
Score6/10-
Adds Run key to start application
-
Checks installed software on the system
Looks up Uninstall key entries in the registry to enumerate software on the system.
-
Drops file in System32 directory