General
- Target 2026-09-09_81a8eb422a13f2619090ca1123816723_elex_glassworm_remcos_smoke-loader_stealc_stop_tofsee
- Size 969KB
- Sample260909-vbdz3syblh
- SHA256 5d304a5bc0ec5d38585ff8879754258d8c4afa59a37afb69f9e408c9fc4f36ed
- MD5 81a8eb422a13f2619090ca1123816723
- SHA1 2ca7e6da4fcd4e509d6cc8a05f8eac3754108f1b
- SHA512 49295893c73871ff4b1f8294d9d2449561a96e55be278a98249b2f254a743dd42a93c7d74b96b944e02c02a653eadbb7283745b07a183ff81227ff33e7b1ea2e
- SSDEEP 6144:9wynAtMrOVRkidy9yIGWlUiIdxJvDrnBFsGGeHYwNf5HI6HE/dAEQyBZ/BdxCCRP:9wKfOVRo9yRYKl5HICEaEQu/BdCmv
- TLSH T1E025E706A7F94119F5F37B30AABA42555B767C56AB35C64E328C324E4F70A80DA32733
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
6/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-09-09_81a8eb422a13f2619090ca1123816723_elex_glassworm_remcos_smoke-loader_stealc_stop_tofsee.exe
Resource
win10v2004-20260513-en
8 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-09-09_81a8eb422a13f2619090ca1123816723_elex_glassworm_remcos_smoke-loader_stealc_stop_tofsee.exe
Resource
win11ltsc2024-20260710-en
8 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-09-09_81a8eb422a13f2619090ca1123816723_elex_glassworm_remcos_smoke-loader_stealc_stop_tofsee
- Size 969KB
- SHA256 5d304a5bc0ec5d38585ff8879754258d8c4afa59a37afb69f9e408c9fc4f36ed
- MD5 81a8eb422a13f2619090ca1123816723
- SHA1 2ca7e6da4fcd4e509d6cc8a05f8eac3754108f1b
- SHA512 49295893c73871ff4b1f8294d9d2449561a96e55be278a98249b2f254a743dd42a93c7d74b96b944e02c02a653eadbb7283745b07a183ff81227ff33e7b1ea2e
- SSDEEP 6144:9wynAtMrOVRkidy9yIGWlUiIdxJvDrnBFsGGeHYwNf5HI6HE/dAEQyBZ/BdxCCRP:9wKfOVRo9yRYKl5HICEaEQu/BdCmv
- TLSH T1E025E706A7F94119F5F37B30AABA42555B767C56AB35C64E328C324E4F70A80DA32733
- MD5 SHA1 SHA512 SSDEEP TLSH
Score6/10-
Adds Run key to start application
-
Checks installed software on the system
Looks up Uninstall key entries in the registry to enumerate software on the system.
-
Drops file in System32 directory