General
- Target 2026-09-09_87004b8ff6d3a384346ea95ef74acb4f_elex_glassworm_remcos_smoke-loader_stealc_stop_tofsee
- Size 1.8MB
- Sample260909-tz265sch23
- SHA256 8521f3637d5c23e7720d8f27acb5305abcfdd5a16348ad3c91c9fc1cb5515fbb
- MD5 87004b8ff6d3a384346ea95ef74acb4f
- SHA1 dea083230bc8360ec20b5bdc7b37c87665cffb45
- SHA512 7b27b6e050c40863f60567eafa53671aa96eaecc2c953f48de47594e671849b6313a5472abb14c052364a9dff69534a66f0060ecc53fa1f487f67cf7172563e8
- SSDEEP 24576:bxWVeyRY5v4s2hzw4O8b8ITDnlnFFqGQD:b8Ylzuzw4O8b8ITDnlnFFqL
- TLSH T1F795F9E27FE0B121E0E26E353926997CA9637C659D76824B3287F32D5B32360CD25317
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
6/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-09-09_87004b8ff6d3a384346ea95ef74acb4f_elex_glassworm_remcos_smoke-loader_stealc_stop_tofsee.exe
Resource
win10v2004-20260513-en
8 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-09-09_87004b8ff6d3a384346ea95ef74acb4f_elex_glassworm_remcos_smoke-loader_stealc_stop_tofsee.exe
Resource
win11ltsc2024-20260709-en
8 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-09-09_87004b8ff6d3a384346ea95ef74acb4f_elex_glassworm_remcos_smoke-loader_stealc_stop_tofsee
- Size 1.8MB
- SHA256 8521f3637d5c23e7720d8f27acb5305abcfdd5a16348ad3c91c9fc1cb5515fbb
- MD5 87004b8ff6d3a384346ea95ef74acb4f
- SHA1 dea083230bc8360ec20b5bdc7b37c87665cffb45
- SHA512 7b27b6e050c40863f60567eafa53671aa96eaecc2c953f48de47594e671849b6313a5472abb14c052364a9dff69534a66f0060ecc53fa1f487f67cf7172563e8
- SSDEEP 24576:bxWVeyRY5v4s2hzw4O8b8ITDnlnFFqGQD:b8Ylzuzw4O8b8ITDnlnFFqL
- TLSH T1F795F9E27FE0B121E0E26E353926997CA9637C659D76824B3287F32D5B32360CD25317
- MD5 SHA1 SHA512 SSDEEP TLSH
Score6/10-
Adds Run key to start application
-
Checks installed software on the system
Looks up Uninstall key entries in the registry to enumerate software on the system.
-
Drops file in System32 directory