General
- Target 2026-09-21_0bcfabf7a133e8d3caab856868039a2d_elex_glassworm_remcos_smoke-loader_stealc_stop_tofsee
- Size 926KB
- Sample260922-sle9saha76
- SHA256 b275c8a40e193b7b433919df414437e3b4292fa9ff0893e049fb7cf4d1ef8296
- MD5 0bcfabf7a133e8d3caab856868039a2d
- SHA1 74edd441b0eb6e776b90ace41eb8496a82f25192
- SHA512 e66e4544ea74ea70d535f9d1d22227a284c3aa5811240baa7e4338af277238a08586721ef79071bcbfead9883b1a44246c4a2c21c17ca14322048f5a28508cec
- SSDEEP 12288:XwKfOVRo9yRY08v42X5sUSF14t6n4O8b8ITDnlnF4EPI1op8K:XxWVeyRY08v4s2hzV4O8b8ITDnlnFz8K
- TLSH T11C15E52176E4C022F5B77A30C8768AF03A25BC52DAB5864F36887F1D7F716A0CD61726
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
6/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-09-21_0bcfabf7a133e8d3caab856868039a2d_elex_glassworm_remcos_smoke-loader_stealc_stop_tofsee.exe
Resource
win10v2004-20260911-en
8 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-09-21_0bcfabf7a133e8d3caab856868039a2d_elex_glassworm_remcos_smoke-loader_stealc_stop_tofsee.exe
Resource
win11ltsc2024-20260911-en
8 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-09-21_0bcfabf7a133e8d3caab856868039a2d_elex_glassworm_remcos_smoke-loader_stealc_stop_tofsee
- Size 926KB
- SHA256 b275c8a40e193b7b433919df414437e3b4292fa9ff0893e049fb7cf4d1ef8296
- MD5 0bcfabf7a133e8d3caab856868039a2d
- SHA1 74edd441b0eb6e776b90ace41eb8496a82f25192
- SHA512 e66e4544ea74ea70d535f9d1d22227a284c3aa5811240baa7e4338af277238a08586721ef79071bcbfead9883b1a44246c4a2c21c17ca14322048f5a28508cec
- SSDEEP 12288:XwKfOVRo9yRY08v42X5sUSF14t6n4O8b8ITDnlnF4EPI1op8K:XxWVeyRY08v4s2hzV4O8b8ITDnlnFz8K
- TLSH T11C15E52176E4C022F5B77A30C8768AF03A25BC52DAB5864F36887F1D7F716A0CD61726
- MD5 SHA1 SHA512 SSDEEP TLSH
Score6/10-
Adds Run key to start application
-
Checks installed software on the system
Looks up Uninstall key entries in the registry to enumerate software on the system.
-
Drops file in System32 directory