General
- Target 2026-09-01_1243ac628e680c64e3afbe444e87a318_elex_glassworm_remcos_smoke-loader_stealc_stop_tofsee
- Size 1.1MB
- Sample260901-1cmaqs11bw
- SHA256 f1631a0a3292234cdba36747734ce3b00a95da03a0bcb1f869bcbfbafc0673b8
- MD5 1243ac628e680c64e3afbe444e87a318
- SHA1 bfd02c0b6943e3ca9202fa82c4a2f65af8f97050
- SHA512 9163df9b94c5e2ace5beed0b9b6110c95a31b8d715159a06507c072748a1586b2385ed9813152be6b05e91355f51bb890aab74a625cf4c10bd5efff21ef4d2c6
- SSDEEP 24576:8xWVeyRY+fz4O8b8ITDnljFspsYJL4YJLcR:88YU4O8b8ITDnljFspsYF4YFO
- TLSH T176452A21B2E48025F4B77B308D768AA43A36BC129E75C64F364C375E6F716B0DE21726
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
6/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-09-01_1243ac628e680c64e3afbe444e87a318_elex_glassworm_remcos_smoke-loader_stealc_stop_tofsee.exe
Resource
win10v2004-20260513-en
8 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-09-01_1243ac628e680c64e3afbe444e87a318_elex_glassworm_remcos_smoke-loader_stealc_stop_tofsee.exe
Resource
win11ltsc2024-20260709-en
8 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-09-01_1243ac628e680c64e3afbe444e87a318_elex_glassworm_remcos_smoke-loader_stealc_stop_tofsee
- Size 1.1MB
- SHA256 f1631a0a3292234cdba36747734ce3b00a95da03a0bcb1f869bcbfbafc0673b8
- MD5 1243ac628e680c64e3afbe444e87a318
- SHA1 bfd02c0b6943e3ca9202fa82c4a2f65af8f97050
- SHA512 9163df9b94c5e2ace5beed0b9b6110c95a31b8d715159a06507c072748a1586b2385ed9813152be6b05e91355f51bb890aab74a625cf4c10bd5efff21ef4d2c6
- SSDEEP 24576:8xWVeyRY+fz4O8b8ITDnljFspsYJL4YJLcR:88YU4O8b8ITDnljFspsYF4YFO
- TLSH T176452A21B2E48025F4B77B308D768AA43A36BC129E75C64F364C375E6F716B0DE21726
- MD5 SHA1 SHA512 SSDEEP TLSH
Score6/10-
Adds Run key to start application
-
Checks installed software on the system
Looks up Uninstall key entries in the registry to enumerate software on the system.
-
Drops file in System32 directory