General
- Target 2026-08-30_b189ebd7af46f3fea80276bf6366ad1d_elex_glassworm_remcos_smoke-loader_stealc_stop_tofsee
- Size 1.1MB
- Sample260831-hbhbaafa38
- SHA256 3cf7c45d648b69738398dbaba0ff50b0472bd6ba2e3e76d33e2aa943177317d3
- MD5 b189ebd7af46f3fea80276bf6366ad1d
- SHA1 8692352749ce68a8f51ce79dc1e257f82b8687bb
- SHA512 327447ab2c8d5cffb752590bd3524088b9e9fb0995a943b512068ba0e0422a79ef93f1a48cada6833eeb8ff1363a9e2473096d8c25cdf53f534e4f9ef7fc80b4
- SSDEEP 24576:9xWVeyRYxyz4O8b8ITDnljF1YJL4YJL9K:98Ya4O8b8ITDnljF1YF4YFI
- TLSH T1F4451A21B2E48015F4B77B308D768AA43A36BC125E75C65F368C375E6F316B0DE2172A
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
6/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-08-30_b189ebd7af46f3fea80276bf6366ad1d_elex_glassworm_remcos_smoke-loader_stealc_stop_tofsee.exe
Resource
win10v2004-20260513-en
8 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-08-30_b189ebd7af46f3fea80276bf6366ad1d_elex_glassworm_remcos_smoke-loader_stealc_stop_tofsee.exe
Resource
win11ltsc2024-20260709-en
8 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-08-30_b189ebd7af46f3fea80276bf6366ad1d_elex_glassworm_remcos_smoke-loader_stealc_stop_tofsee
- Size 1.1MB
- SHA256 3cf7c45d648b69738398dbaba0ff50b0472bd6ba2e3e76d33e2aa943177317d3
- MD5 b189ebd7af46f3fea80276bf6366ad1d
- SHA1 8692352749ce68a8f51ce79dc1e257f82b8687bb
- SHA512 327447ab2c8d5cffb752590bd3524088b9e9fb0995a943b512068ba0e0422a79ef93f1a48cada6833eeb8ff1363a9e2473096d8c25cdf53f534e4f9ef7fc80b4
- SSDEEP 24576:9xWVeyRYxyz4O8b8ITDnljF1YJL4YJL9K:98Ya4O8b8ITDnljF1YF4YFI
- TLSH T1F4451A21B2E48015F4B77B308D768AA43A36BC125E75C65F368C375E6F316B0DE2172A
- MD5 SHA1 SHA512 SSDEEP TLSH
Score6/10-
Adds Run key to start application
-
Checks installed software on the system
Looks up Uninstall key entries in the registry to enumerate software on the system.
-
Drops file in System32 directory