General
- Target 2026-09-01_57e90959321f844c729fea2b84ca22d1_elex_glassworm_remcos_smoke-loader_stealc_stop_tofsee
- Size 2.1MB
- Sample260903-nwaptsssdz
- SHA256 57a1ba6009ca646e6063b1f82c2c6ba36966108ac608cf417519fb345cda6dd5
- MD5 57e90959321f844c729fea2b84ca22d1
- SHA1 3db193bb432e63a525f4fd64cc72794d5d374890
- SHA512 2b3b66c57952eb1558633410fec51ffa5431a7c99553ad70f81f5080d00d65eead9056f2e69fa6619126997b87106bedd5734f00b48aa9cb922defcd12dd26a8
- SSDEEP 24576:VxWVeyRYf4s2hzOlnz1xTVIlz7X9zOo4PjnikEpx/nLWvJ6N:V8YfzuzOlnnSR7Xgo4TiRPnLWvJk
- TLSH T1D1A5BD11B6E48020F5B37B349D7F86A44A26BC56AFF4C65F36487B5E6F30680B920736
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
6/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-09-01_57e90959321f844c729fea2b84ca22d1_elex_glassworm_remcos_smoke-loader_stealc_stop_tofsee.exe
Resource
win10v2004-20260513-en
8 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-09-01_57e90959321f844c729fea2b84ca22d1_elex_glassworm_remcos_smoke-loader_stealc_stop_tofsee.exe
Resource
win11ltsc2024-20260710-en
8 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-09-01_57e90959321f844c729fea2b84ca22d1_elex_glassworm_remcos_smoke-loader_stealc_stop_tofsee
- Size 2.1MB
- SHA256 57a1ba6009ca646e6063b1f82c2c6ba36966108ac608cf417519fb345cda6dd5
- MD5 57e90959321f844c729fea2b84ca22d1
- SHA1 3db193bb432e63a525f4fd64cc72794d5d374890
- SHA512 2b3b66c57952eb1558633410fec51ffa5431a7c99553ad70f81f5080d00d65eead9056f2e69fa6619126997b87106bedd5734f00b48aa9cb922defcd12dd26a8
- SSDEEP 24576:VxWVeyRYf4s2hzOlnz1xTVIlz7X9zOo4PjnikEpx/nLWvJ6N:V8YfzuzOlnnSR7Xgo4TiRPnLWvJk
- TLSH T1D1A5BD11B6E48020F5B37B349D7F86A44A26BC56AFF4C65F36487B5E6F30680B920736
- MD5 SHA1 SHA512 SSDEEP TLSH
Score6/10-
Adds Run key to start application
-
Checks installed software on the system
Looks up Uninstall key entries in the registry to enumerate software on the system.
-
Drops file in System32 directory