General
- Target 2026-09-10_ff49dcccfcb841d652012434345a1511_elex_glassworm_remcos_smoke-loader_stealc_stop_tofsee
- Size 1.6MB
- Sample260910-3pr3vshq8t
- SHA256 cca8be5e57b56303299d1244fd005e4b1b5d5dd0c7ebcbd848d06bd5d5b06274
- MD5 ff49dcccfcb841d652012434345a1511
- SHA1 98a14875bb90e3d57c653cdd07868343bb7d58d1
- SHA512 2a6d41bef36146bd761eed4e328c1c7692ee1300b8248c21697e4831b192b9bae765c4d76a19919cbc7b4bfa879d8b12666790329adefea4e0dd327cb1ef8251
- SSDEEP 24576:PxWVeyRYn4qv4s2hzt4O8b8ITDnl/FNsnHCc:P8YHzuzt4O8b8ITDnl/FNsHR
- TLSH T1C475922163FD5219F1F37B70A9B55AA52E76BC63EA75C54D3248230D0FB0AA0C961B33
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
6/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-09-10_ff49dcccfcb841d652012434345a1511_elex_glassworm_remcos_smoke-loader_stealc_stop_tofsee.exe
Resource
win10v2004-20260513-en
8 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-09-10_ff49dcccfcb841d652012434345a1511_elex_glassworm_remcos_smoke-loader_stealc_stop_tofsee.exe
Resource
win11ltsc2024-20260709-en
8 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-09-10_ff49dcccfcb841d652012434345a1511_elex_glassworm_remcos_smoke-loader_stealc_stop_tofsee
- Size 1.6MB
- SHA256 cca8be5e57b56303299d1244fd005e4b1b5d5dd0c7ebcbd848d06bd5d5b06274
- MD5 ff49dcccfcb841d652012434345a1511
- SHA1 98a14875bb90e3d57c653cdd07868343bb7d58d1
- SHA512 2a6d41bef36146bd761eed4e328c1c7692ee1300b8248c21697e4831b192b9bae765c4d76a19919cbc7b4bfa879d8b12666790329adefea4e0dd327cb1ef8251
- SSDEEP 24576:PxWVeyRYn4qv4s2hzt4O8b8ITDnl/FNsnHCc:P8YHzuzt4O8b8ITDnl/FNsHR
- TLSH T1C475922163FD5219F1F37B70A9B55AA52E76BC63EA75C54D3248230D0FB0AA0C961B33
- MD5 SHA1 SHA512 SSDEEP TLSH
Score6/10-
Adds Run key to start application
-
Checks installed software on the system
Looks up Uninstall key entries in the registry to enumerate software on the system.
-
Drops file in System32 directory