General
- Target 2026-09-24_5fdf8d661d4f5dc2ad007669da98dd22_elex_glassworm_remcos_smoke-loader_stealc_stop_tofsee
- Size 1.7MB
- Sample260925-kqaabstw8k
- SHA256 363eaf31dd7c49342300a4725129064661d72606d6b952629fca46ba49dccdb1
- MD5 5fdf8d661d4f5dc2ad007669da98dd22
- SHA1 6e3be147a768df4cab144e67b0666b924953a739
- SHA512 12c15fb44bc8367ef40ca73e597ec5cfba4954c07f204e201dea244d8fbf630fc272bbdd43f4f8b8df853837f0ae31cdcd8a5dea4f1d1a7150e991ea5297c900
- SSDEEP 12288:twKfOVRo9yRY4wmf4HICEmFpYm2Ua1L3nl7EPlOW/:txWVeyRYAA4mFe11L3u5/
- TLSH T1F885090177E4C115F2F32B3099BA82545A667C129F79C64F338DBB4F6FB1A409A22736
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
6/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-09-24_5fdf8d661d4f5dc2ad007669da98dd22_elex_glassworm_remcos_smoke-loader_stealc_stop_tofsee.exe
Resource
win10v2004-20260911-en
8 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-09-24_5fdf8d661d4f5dc2ad007669da98dd22_elex_glassworm_remcos_smoke-loader_stealc_stop_tofsee.exe
Resource
win11ltsc2024-20260911-en
8 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-09-24_5fdf8d661d4f5dc2ad007669da98dd22_elex_glassworm_remcos_smoke-loader_stealc_stop_tofsee
- Size 1.7MB
- SHA256 363eaf31dd7c49342300a4725129064661d72606d6b952629fca46ba49dccdb1
- MD5 5fdf8d661d4f5dc2ad007669da98dd22
- SHA1 6e3be147a768df4cab144e67b0666b924953a739
- SHA512 12c15fb44bc8367ef40ca73e597ec5cfba4954c07f204e201dea244d8fbf630fc272bbdd43f4f8b8df853837f0ae31cdcd8a5dea4f1d1a7150e991ea5297c900
- SSDEEP 12288:twKfOVRo9yRY4wmf4HICEmFpYm2Ua1L3nl7EPlOW/:txWVeyRYAA4mFe11L3u5/
- TLSH T1F885090177E4C115F2F32B3099BA82545A667C129F79C64F338DBB4F6FB1A409A22736
- MD5 SHA1 SHA512 SSDEEP TLSH
Score6/10-
Adds Run key to start application
-
Checks installed software on the system
Looks up Uninstall key entries in the registry to enumerate software on the system.
-
Drops file in System32 directory