General
- Target 2026-09-04_3f898bc0c5daac1effea4f1ac22221c9_elex_glassworm_remcos_smoke-loader_stealc_stop_tofsee
- Size 1.1MB
- Sample260905-qhtlwsvgmb
- SHA256 170500cde3df001f03b7e1f56a720506cbd02b984d25acb76fe444ed178edcbd
- MD5 3f898bc0c5daac1effea4f1ac22221c9
- SHA1 c57bbcd4e5d6e71c196580edcf799ac3112753fa
- SHA512 2b6f6e2fb3900e6e217565e5d8c31817ee561ecfd6d8706477f77000296d5177fb2ce6147035b05a0d9626ff745c0e5ce8cf977d87af648185b3d8e925163a20
- SSDEEP 24576:MxWVeyRY4z4O8b8ITDnljFspsYJL4YJLIh:M8Ya4O8b8ITDnljFspsYF4YF6
- TLSH T1C4452A21B2E48025F4B77B308D768AA43A36BC129E75C64F364C375E6F716B0DE21726
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
6/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-09-04_3f898bc0c5daac1effea4f1ac22221c9_elex_glassworm_remcos_smoke-loader_stealc_stop_tofsee.exe
Resource
win10v2004-20260513-en
8 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-09-04_3f898bc0c5daac1effea4f1ac22221c9_elex_glassworm_remcos_smoke-loader_stealc_stop_tofsee.exe
Resource
win11ltsc2024-20260710-en
8 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-09-04_3f898bc0c5daac1effea4f1ac22221c9_elex_glassworm_remcos_smoke-loader_stealc_stop_tofsee
- Size 1.1MB
- SHA256 170500cde3df001f03b7e1f56a720506cbd02b984d25acb76fe444ed178edcbd
- MD5 3f898bc0c5daac1effea4f1ac22221c9
- SHA1 c57bbcd4e5d6e71c196580edcf799ac3112753fa
- SHA512 2b6f6e2fb3900e6e217565e5d8c31817ee561ecfd6d8706477f77000296d5177fb2ce6147035b05a0d9626ff745c0e5ce8cf977d87af648185b3d8e925163a20
- SSDEEP 24576:MxWVeyRY4z4O8b8ITDnljFspsYJL4YJLIh:M8Ya4O8b8ITDnljFspsYF4YF6
- TLSH T1C4452A21B2E48025F4B77B308D768AA43A36BC129E75C64F364C375E6F716B0DE21726
- MD5 SHA1 SHA512 SSDEEP TLSH
Score6/10-
Adds Run key to start application
-
Checks installed software on the system
Looks up Uninstall key entries in the registry to enumerate software on the system.
-
Drops file in System32 directory