General
- Target 2026-09-24_2998ccc7299f06a25a09ffc855786c7d_elex_glassworm_remcos_smoke-loader_stealc_stop_tofsee
- Size 1.9MB
- Sample260924-eqs5jsdf95
- SHA256 834d88074799473a30c0a28e81ad311c9be5a024bcebd6ea595d4b910a26c881
- MD5 2998ccc7299f06a25a09ffc855786c7d
- SHA1 506aaeb9a3cdd709aa021c4ede83407d0a05f5e2
- SHA512 ff82d5656a2e4c96ac3e21680fa7e3e4317371c5a212a3c9da90e3d897612e0a5c78b311ae8964c142f1faaadfb2758ed3709f4f86ebe4ea9af2f77a4ac1dd06
- SSDEEP 6144:IwynAtMrOVRkidy9yIGWlUihUxJvDrnBFsXGeHYwNf5HI6HEY6qVAjoBZlHWP824:IwKfOVRo9yRYX5HICEY6jUlHWP82S2o
- TLSH T196951BCD53F4CC17EDBAEE3C55A541540E2E7C11562A87CA314FB2CB0EBA64C9522B2E
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
6/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-09-24_2998ccc7299f06a25a09ffc855786c7d_elex_glassworm_remcos_smoke-loader_stealc_stop_tofsee.exe
Resource
win10v2004-20260911-en
8 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-09-24_2998ccc7299f06a25a09ffc855786c7d_elex_glassworm_remcos_smoke-loader_stealc_stop_tofsee.exe
Resource
win11ltsc2024-20260911-en
8 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-09-24_2998ccc7299f06a25a09ffc855786c7d_elex_glassworm_remcos_smoke-loader_stealc_stop_tofsee
- Size 1.9MB
- SHA256 834d88074799473a30c0a28e81ad311c9be5a024bcebd6ea595d4b910a26c881
- MD5 2998ccc7299f06a25a09ffc855786c7d
- SHA1 506aaeb9a3cdd709aa021c4ede83407d0a05f5e2
- SHA512 ff82d5656a2e4c96ac3e21680fa7e3e4317371c5a212a3c9da90e3d897612e0a5c78b311ae8964c142f1faaadfb2758ed3709f4f86ebe4ea9af2f77a4ac1dd06
- SSDEEP 6144:IwynAtMrOVRkidy9yIGWlUihUxJvDrnBFsXGeHYwNf5HI6HEY6qVAjoBZlHWP824:IwKfOVRo9yRYX5HICEY6jUlHWP82S2o
- TLSH T196951BCD53F4CC17EDBAEE3C55A541540E2E7C11562A87CA314FB2CB0EBA64C9522B2E
- MD5 SHA1 SHA512 SSDEEP TLSH
Score6/10-
Adds Run key to start application
-
Checks installed software on the system
Looks up Uninstall key entries in the registry to enumerate software on the system.
-
Drops file in System32 directory