General
- Target 2026-09-05_59ab4e17b79bde3ba39f96542372f7ad_elex_glassworm_remcos_smoke-loader_stealc_stop_tofsee
- Size 4.7MB
- Sample260907-1e17nsbe55
- SHA256 5cb36bfdc39129995dea0f1645afec8578bad5070559a5e016587a95de1aa4ae
- MD5 59ab4e17b79bde3ba39f96542372f7ad
- SHA1 0c9316f912d10ea6dd850578058cb3ebc7d65ee8
- SHA512 1ad8587bbd4bb67290c4088f0eae01d04e92e6052be39d26a99dff91e1218c14df3b5a7b410cef9d7fc972944e21a54f6808cf9d149143c455de4cc4417be7c9
- SSDEEP 49152:Q8YJ+uznXZZ+zC6tIpEs4O8b8ITDnl1FbcQZybFzfDCrL6/jae4SCM1W9w3IVsuD:Rs+uznXZZ+zC6tIpE1bkY
- TLSH T1A336E651A3F94604F6F73F746EB556605E3ABCA2AE39C21E2644311E1A72F90CD60B33
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
6/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-09-05_59ab4e17b79bde3ba39f96542372f7ad_elex_glassworm_remcos_smoke-loader_stealc_stop_tofsee.exe
Resource
win10v2004-20260513-en
8 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-09-05_59ab4e17b79bde3ba39f96542372f7ad_elex_glassworm_remcos_smoke-loader_stealc_stop_tofsee.exe
Resource
win11ltsc2024-20260709-en
8 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-09-05_59ab4e17b79bde3ba39f96542372f7ad_elex_glassworm_remcos_smoke-loader_stealc_stop_tofsee
- Size 4.7MB
- SHA256 5cb36bfdc39129995dea0f1645afec8578bad5070559a5e016587a95de1aa4ae
- MD5 59ab4e17b79bde3ba39f96542372f7ad
- SHA1 0c9316f912d10ea6dd850578058cb3ebc7d65ee8
- SHA512 1ad8587bbd4bb67290c4088f0eae01d04e92e6052be39d26a99dff91e1218c14df3b5a7b410cef9d7fc972944e21a54f6808cf9d149143c455de4cc4417be7c9
- SSDEEP 49152:Q8YJ+uznXZZ+zC6tIpEs4O8b8ITDnl1FbcQZybFzfDCrL6/jae4SCM1W9w3IVsuD:Rs+uznXZZ+zC6tIpE1bkY
- TLSH T1A336E651A3F94604F6F73F746EB556605E3ABCA2AE39C21E2644311E1A72F90CD60B33
- MD5 SHA1 SHA512 SSDEEP TLSH
Score6/10-
Adds Run key to start application
-
Checks installed software on the system
Looks up Uninstall key entries in the registry to enumerate software on the system.
-
Drops file in System32 directory