General
- Target 2026-08-30_caf5827e072c83cd7c31692946fe8c26_elex_glassworm_remcos_smoke-loader_stealc_stop_tofsee
- Size 3.7MB
- Sample260831-e2gwnadk3x
- SHA256 ba7b87bd71442aae9747897462373e6e8e8c994ad3ee124a818157f32c89a6c3
- MD5 caf5827e072c83cd7c31692946fe8c26
- SHA1 0bb9c9fb63b4102d42406aae8c1953dcf22b8a78
- SHA512 fa5fda09e881dc359d90a7b518555c41f3d06a825f2382b221b68695d1422d13e4e39ff26a32ab6c53d0704f3e74a0c37115d1484b1dd6a369535be8d88cf6cf
- SSDEEP 12288:awKfOVRo9yRYDqBA4O8b8ITDnlBFF0TfBfN71qoms1qtQu:axWVeyRYDn4O8b8ITDnlBFC5F71qnQu
- TLSH T14206A4E27EE0F024F1D15D357D2696BCE9137C619DA686873387F72E2BB22208D16316
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
6/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-08-30_caf5827e072c83cd7c31692946fe8c26_elex_glassworm_remcos_smoke-loader_stealc_stop_tofsee.exe
Resource
win10v2004-20260513-en
8 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-08-30_caf5827e072c83cd7c31692946fe8c26_elex_glassworm_remcos_smoke-loader_stealc_stop_tofsee.exe
Resource
win11ltsc2024-20260709-en
8 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-08-30_caf5827e072c83cd7c31692946fe8c26_elex_glassworm_remcos_smoke-loader_stealc_stop_tofsee
- Size 3.7MB
- SHA256 ba7b87bd71442aae9747897462373e6e8e8c994ad3ee124a818157f32c89a6c3
- MD5 caf5827e072c83cd7c31692946fe8c26
- SHA1 0bb9c9fb63b4102d42406aae8c1953dcf22b8a78
- SHA512 fa5fda09e881dc359d90a7b518555c41f3d06a825f2382b221b68695d1422d13e4e39ff26a32ab6c53d0704f3e74a0c37115d1484b1dd6a369535be8d88cf6cf
- SSDEEP 12288:awKfOVRo9yRYDqBA4O8b8ITDnlBFF0TfBfN71qoms1qtQu:axWVeyRYDn4O8b8ITDnlBFC5F71qnQu
- TLSH T14206A4E27EE0F024F1D15D357D2696BCE9137C619DA686873387F72E2BB22208D16316
- MD5 SHA1 SHA512 SSDEEP TLSH
Score6/10-
Adds Run key to start application
-
Checks installed software on the system
Looks up Uninstall key entries in the registry to enumerate software on the system.
-
Drops file in System32 directory