General
- Target 2026-10-01_eb61af6abc2717c1ed076abb9538b399_elex_glassworm_remcos_smoke-loader_stealc_stop_tofsee
- Size 1.5MB
- Sample261001-2drsaasamd
- SHA256 079200f3107ffba9654b2e2fa2aafd46b10afc5609ef0ab03624c4d14d16c5b5
- MD5 eb61af6abc2717c1ed076abb9538b399
- SHA1 6cd16302464cf3a9760fb5441cd206e1c46868bb
- SHA512 bae3eb8b31fd5a6f7e1c3d35773b62bb82a51b9ef973aae27086106bfb51c9fbc6cdb0fcfc8b516db186e2b3ca11aabffda31075b971ac47c7f499379a75b7aa
- SSDEEP 24576:FxWVeyRYjv4s2hzO4O8b8ITDnl7FDw67z:F8YbzuzO4O8b8ITDnl7F06X
- TLSH T18075A53263F98225F2F77B30997946611A77BC51AE79E20E2244322D4E70BB0DD65B33
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
6/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-10-01_eb61af6abc2717c1ed076abb9538b399_elex_glassworm_remcos_smoke-loader_stealc_stop_tofsee.exe
Resource
win10v2004-20260911-en
9 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-10-01_eb61af6abc2717c1ed076abb9538b399_elex_glassworm_remcos_smoke-loader_stealc_stop_tofsee.exe
Resource
win11ltsc2024-20260911-en
9 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-10-01_eb61af6abc2717c1ed076abb9538b399_elex_glassworm_remcos_smoke-loader_stealc_stop_tofsee
- Size 1.5MB
- SHA256 079200f3107ffba9654b2e2fa2aafd46b10afc5609ef0ab03624c4d14d16c5b5
- MD5 eb61af6abc2717c1ed076abb9538b399
- SHA1 6cd16302464cf3a9760fb5441cd206e1c46868bb
- SHA512 bae3eb8b31fd5a6f7e1c3d35773b62bb82a51b9ef973aae27086106bfb51c9fbc6cdb0fcfc8b516db186e2b3ca11aabffda31075b971ac47c7f499379a75b7aa
- SSDEEP 24576:FxWVeyRYjv4s2hzO4O8b8ITDnl7FDw67z:F8YbzuzO4O8b8ITDnl7F06X
- TLSH T18075A53263F98225F2F77B30997946611A77BC51AE79E20E2244322D4E70BB0DD65B33
- MD5 SHA1 SHA512 SSDEEP TLSH
Score6/10-
Adds Run key to start application
-
Checks installed software on the system
Looks up Uninstall key entries in the registry to enumerate software on the system.
-
Drops file in System32 directory