General
- Target 2026-09-01_6f6b520eabdae60fcdade0b97c725c57_elex_glassworm_remcos_smoke-loader_stealc_stop_tofsee
- Size 1.2MB
- Sample260903-l5jb8avalc
- SHA256 b7074cf93646b5900d97aab72fb53b6d430dca356fb02213deaeb65e0c9c42b3
- MD5 6f6b520eabdae60fcdade0b97c725c57
- SHA1 e26ac7ccde1bc7047151ba593fd7d10eeb665786
- SHA512 bd64653725a8d838b0fd94f9c3dc9d4e5feb6194f38bd399947a1c094be24815138a17bbe72ec3c8ec5015b6e16a79f1900075140a2c82bedaca87f4e8819d72
- SSDEEP 12288:AwKfOVRo9yRYcM7W4O8b8ITDnlSHgeTx5KEZVqc:AxWVeyRYcM7W4O8b8ITDnlSPcc
- TLSH T12545EB1262ECC6D4E1BB6A30DD74B6F856267C11DE748E8B2D44BE093A7065089B373F
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
6/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-09-01_6f6b520eabdae60fcdade0b97c725c57_elex_glassworm_remcos_smoke-loader_stealc_stop_tofsee.exe
Resource
win10v2004-20260513-en
8 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-09-01_6f6b520eabdae60fcdade0b97c725c57_elex_glassworm_remcos_smoke-loader_stealc_stop_tofsee.exe
Resource
win11ltsc2024-20260709-en
8 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-09-01_6f6b520eabdae60fcdade0b97c725c57_elex_glassworm_remcos_smoke-loader_stealc_stop_tofsee
- Size 1.2MB
- SHA256 b7074cf93646b5900d97aab72fb53b6d430dca356fb02213deaeb65e0c9c42b3
- MD5 6f6b520eabdae60fcdade0b97c725c57
- SHA1 e26ac7ccde1bc7047151ba593fd7d10eeb665786
- SHA512 bd64653725a8d838b0fd94f9c3dc9d4e5feb6194f38bd399947a1c094be24815138a17bbe72ec3c8ec5015b6e16a79f1900075140a2c82bedaca87f4e8819d72
- SSDEEP 12288:AwKfOVRo9yRYcM7W4O8b8ITDnlSHgeTx5KEZVqc:AxWVeyRYcM7W4O8b8ITDnlSPcc
- TLSH T12545EB1262ECC6D4E1BB6A30DD74B6F856267C11DE748E8B2D44BE093A7065089B373F
- MD5 SHA1 SHA512 SSDEEP TLSH
Score6/10-
Adds Run key to start application
-
Checks installed software on the system
Looks up Uninstall key entries in the registry to enumerate software on the system.
-
Drops file in System32 directory