General
- Target 2026-09-25_e59d8a341ea8beee30c37d431dfaeb92_elex_glassworm_remcos_smoke-loader_stealc_stop_tofsee
- Size 1.2MB
- Sample260925-wsehlsty4j
- SHA256 42c1308c50400596526d96f8e1d270dfa50a5ed16ff292b215081f69eea30e80
- MD5 e59d8a341ea8beee30c37d431dfaeb92
- SHA1 9973fa04dc20d01082a1e1d32a50333b1357dbc5
- SHA512 5dbe12d85dd0bd5bcfaefb8cb542e4efd9bb70e1a6d04d4ae41d5766b71d7da98a863b587288c6d231a88800fdfb3a85f360ee59531d5a80ce9e2f3037c62742
- SSDEEP 24576:lxWVeyRYhYz4O8b8ITDnljFgw5w0YJL4YJLxH:l8Yw4O8b8ITDnljFlm0YF4YFV
- TLSH T150452A21B2E58025F4B77B348D768EA43A35BC229E75C64F364C371E6F316A0DE21726
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
6/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-09-25_e59d8a341ea8beee30c37d431dfaeb92_elex_glassworm_remcos_smoke-loader_stealc_stop_tofsee.exe
Resource
win10v2004-20260911-en
9 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-09-25_e59d8a341ea8beee30c37d431dfaeb92_elex_glassworm_remcos_smoke-loader_stealc_stop_tofsee.exe
Resource
win11ltsc2024-20260911-en
9 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-09-25_e59d8a341ea8beee30c37d431dfaeb92_elex_glassworm_remcos_smoke-loader_stealc_stop_tofsee
- Size 1.2MB
- SHA256 42c1308c50400596526d96f8e1d270dfa50a5ed16ff292b215081f69eea30e80
- MD5 e59d8a341ea8beee30c37d431dfaeb92
- SHA1 9973fa04dc20d01082a1e1d32a50333b1357dbc5
- SHA512 5dbe12d85dd0bd5bcfaefb8cb542e4efd9bb70e1a6d04d4ae41d5766b71d7da98a863b587288c6d231a88800fdfb3a85f360ee59531d5a80ce9e2f3037c62742
- SSDEEP 24576:lxWVeyRYhYz4O8b8ITDnljFgw5w0YJL4YJLxH:l8Yw4O8b8ITDnljFlm0YF4YFV
- TLSH T150452A21B2E58025F4B77B348D768EA43A35BC229E75C64F364C371E6F316A0DE21726
- MD5 SHA1 SHA512 SSDEEP TLSH
Score6/10-
Adds Run key to start application
-
Checks installed software on the system
Looks up Uninstall key entries in the registry to enumerate software on the system.
-
Drops file in System32 directory