General
- Target 2026-09-25_ecf1bbe3813b8f9b7df081688bb0aafd_elex_glassworm_remcos_smoke-loader_stealc_stop_tofsee
- Size 1.2MB
- Sample260925-v9g5dssemf
- SHA256 3b4bc32b828c27c8decb001026d71a6c3fecc711d975257b86944706a610a648
- MD5 ecf1bbe3813b8f9b7df081688bb0aafd
- SHA1 7e1f9c0a2cfceba68ff6e4dd08108dc4e0a084e6
- SHA512 b8ce23ad7eec8536c484ce1355c285abefe3e21fa527c070327055652b55b97e7516710c7a4cefc80d1a5cfb4961cc28451e1f1a56f87440c1f6fafe597a554c
- SSDEEP 24576:lxWVeyRYhjz4O8b8ITDnljFgw5w0YJL4YJLxH:l8Yl4O8b8ITDnljFlm0YF4YFV
- TLSH T19D452A21B2E58025F4B77B348D768EA43A35BC229E75C64F364C371E6F316A0DE21726
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
6/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-09-25_ecf1bbe3813b8f9b7df081688bb0aafd_elex_glassworm_remcos_smoke-loader_stealc_stop_tofsee.exe
Resource
win10v2004-20260911-en
9 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-09-25_ecf1bbe3813b8f9b7df081688bb0aafd_elex_glassworm_remcos_smoke-loader_stealc_stop_tofsee.exe
Resource
win11ltsc2024-20260911-en
9 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-09-25_ecf1bbe3813b8f9b7df081688bb0aafd_elex_glassworm_remcos_smoke-loader_stealc_stop_tofsee
- Size 1.2MB
- SHA256 3b4bc32b828c27c8decb001026d71a6c3fecc711d975257b86944706a610a648
- MD5 ecf1bbe3813b8f9b7df081688bb0aafd
- SHA1 7e1f9c0a2cfceba68ff6e4dd08108dc4e0a084e6
- SHA512 b8ce23ad7eec8536c484ce1355c285abefe3e21fa527c070327055652b55b97e7516710c7a4cefc80d1a5cfb4961cc28451e1f1a56f87440c1f6fafe597a554c
- SSDEEP 24576:lxWVeyRYhjz4O8b8ITDnljFgw5w0YJL4YJLxH:l8Yl4O8b8ITDnljFlm0YF4YFV
- TLSH T19D452A21B2E58025F4B77B348D768EA43A35BC229E75C64F364C371E6F316A0DE21726
- MD5 SHA1 SHA512 SSDEEP TLSH
Score6/10-
Adds Run key to start application
-
Checks installed software on the system
Looks up Uninstall key entries in the registry to enumerate software on the system.
-
Drops file in System32 directory