General
- Target 2026-09-07_c48c0e8e743b6ceffcbcda38166cbaea_elex_glassworm_remcos_smoke-loader_stealc_stop_tofsee
- Size 1.4MB
- Sample260908-g554rsssds
- SHA256 83ac67102430a4aa7a1de685b64d51a0c7b4df8eed71fcfff9ffd7b28b89740b
- MD5 c48c0e8e743b6ceffcbcda38166cbaea
- SHA1 dd4af2f01f74e1a8cb6e8a691a362b955946082e
- SHA512 f4994cc775bb0221058428e14818a83c7fd06aa7ea186880964bad893cc5a1fb0ebab753007af8052cb89fecaffc8d8a872e56a893573ab5b727cf6be80f13f9
- SSDEEP 12288:vwKfOVRo9yRY/mLm84O8b8ITDnlt0aw8+9GJKWa:vxWVeyRY/mLm84O8b8ITDnlY8+9vWa
- TLSH T182650922B194E815E6E23E3049768AA4F535BC016AE44A87334EBF4F7FF13A2ED15315
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
6/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-09-07_c48c0e8e743b6ceffcbcda38166cbaea_elex_glassworm_remcos_smoke-loader_stealc_stop_tofsee.exe
Resource
win10v2004-20260513-en
8 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-09-07_c48c0e8e743b6ceffcbcda38166cbaea_elex_glassworm_remcos_smoke-loader_stealc_stop_tofsee.exe
Resource
win11ltsc2024-20260710-en
8 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-09-07_c48c0e8e743b6ceffcbcda38166cbaea_elex_glassworm_remcos_smoke-loader_stealc_stop_tofsee
- Size 1.4MB
- SHA256 83ac67102430a4aa7a1de685b64d51a0c7b4df8eed71fcfff9ffd7b28b89740b
- MD5 c48c0e8e743b6ceffcbcda38166cbaea
- SHA1 dd4af2f01f74e1a8cb6e8a691a362b955946082e
- SHA512 f4994cc775bb0221058428e14818a83c7fd06aa7ea186880964bad893cc5a1fb0ebab753007af8052cb89fecaffc8d8a872e56a893573ab5b727cf6be80f13f9
- SSDEEP 12288:vwKfOVRo9yRY/mLm84O8b8ITDnlt0aw8+9GJKWa:vxWVeyRY/mLm84O8b8ITDnlY8+9vWa
- TLSH T182650922B194E815E6E23E3049768AA4F535BC016AE44A87334EBF4F7FF13A2ED15315
- MD5 SHA1 SHA512 SSDEEP TLSH
Score6/10-
Adds Run key to start application
-
Checks installed software on the system
Looks up Uninstall key entries in the registry to enumerate software on the system.
-
Drops file in System32 directory