General
- Target 2026-09-24_0d725675d8c2674d826052d2a555933a_elex_glassworm_remcos_smoke-loader_stealc_stop_tofsee
- Size 1.9MB
- Sample260924-e3lk8syfjb
- SHA256 c69960a615c7688e4aa1dd86416f19ab6a4bb2d330c56a10a8afbe329bede27a
- MD5 0d725675d8c2674d826052d2a555933a
- SHA1 4fe373b37d22bacb51f96c6f5867f61dc408fec7
- SHA512 ee8a76f7903e44739749e984edc6ddebfcd5490106cb036e4394485eabc539edbc1b136f1fbb260e7b40f9f4edac94da8279bb674ebefcbca0c3e0e32804d92d
- SSDEEP 6144:IwynAtMrOVRkidy9yIGWlUiRsxJvDrnBFsXGeHYwNf5HI6HEY6qVAjoBZlHWP824:IwKfOVRo9yRYP5HICEY6jUlHWP82S2o
- TLSH T1AC951BCD53F4CC17EDBAEE3C55A541540E2E7C11562A87CA314FB2CB0EBA64C9522B2E
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
8/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-09-24_0d725675d8c2674d826052d2a555933a_elex_glassworm_remcos_smoke-loader_stealc_stop_tofsee.exe
Resource
win10v2004-20260911-en
8 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-09-24_0d725675d8c2674d826052d2a555933a_elex_glassworm_remcos_smoke-loader_stealc_stop_tofsee.exe
Resource
win11ltsc2024-20260911-en
9 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-09-24_0d725675d8c2674d826052d2a555933a_elex_glassworm_remcos_smoke-loader_stealc_stop_tofsee
- Size 1.9MB
- SHA256 c69960a615c7688e4aa1dd86416f19ab6a4bb2d330c56a10a8afbe329bede27a
- MD5 0d725675d8c2674d826052d2a555933a
- SHA1 4fe373b37d22bacb51f96c6f5867f61dc408fec7
- SHA512 ee8a76f7903e44739749e984edc6ddebfcd5490106cb036e4394485eabc539edbc1b136f1fbb260e7b40f9f4edac94da8279bb674ebefcbca0c3e0e32804d92d
- SSDEEP 6144:IwynAtMrOVRkidy9yIGWlUiRsxJvDrnBFsXGeHYwNf5HI6HEY6qVAjoBZlHWP824:IwKfOVRo9yRYP5HICEY6jUlHWP82S2o
- TLSH T1AC951BCD53F4CC17EDBAEE3C55A541540E2E7C11562A87CA314FB2CB0EBA64C9522B2E
- MD5 SHA1 SHA512 SSDEEP TLSH
Score8/10-
Drops file in Drivers directory
-
Adds Run key to start application
-
Checks installed software on the system
Looks up Uninstall key entries in the registry to enumerate software on the system.
-
Drops file in System32 directory