General
- Target 2026-10-06_9354eaa2fe6f66f999067106fcd8eb71_elex_glassworm_remcos_smoke-loader_stealc_stop_tofsee
- Size 1.8MB
- Sample261007-3ae5rafx2v
- SHA256 94f28f3b2e047ecb2a5ca9eac5c521b13d3ed6190c4855a4ce93b0c9c29fe207
- MD5 9354eaa2fe6f66f999067106fcd8eb71
- SHA1 b10591bee0f761de125250abea71dc3005655581
- SHA512 72631d284eb2bf4fcfbeadaa263271f32fa378d2b53d8c56addff284158c5e5bfb613eea8f2b67712e65c7e3fdb3f0d3c0dd3cdf98f79563a1c1ca2b7d600dcc
- SSDEEP 24576:0xWVeyRYg4s2hz6A4O8b8ITDnl9FG3M5WSrIO3G:08Ygzuzj4O8b8ITDnl9FG3M5ef
- TLSH T12A95E62273F99115F6F36B709D764AA01A76BC62AE78C24E3248371D1F70AA0CD64737
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
6/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-10-06_9354eaa2fe6f66f999067106fcd8eb71_elex_glassworm_remcos_smoke-loader_stealc_stop_tofsee.exe
Resource
win10v2004-20260911-en
9 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-10-06_9354eaa2fe6f66f999067106fcd8eb71_elex_glassworm_remcos_smoke-loader_stealc_stop_tofsee.exe
Resource
win11ltsc2024-20260911-en
9 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-10-06_9354eaa2fe6f66f999067106fcd8eb71_elex_glassworm_remcos_smoke-loader_stealc_stop_tofsee
- Size 1.8MB
- SHA256 94f28f3b2e047ecb2a5ca9eac5c521b13d3ed6190c4855a4ce93b0c9c29fe207
- MD5 9354eaa2fe6f66f999067106fcd8eb71
- SHA1 b10591bee0f761de125250abea71dc3005655581
- SHA512 72631d284eb2bf4fcfbeadaa263271f32fa378d2b53d8c56addff284158c5e5bfb613eea8f2b67712e65c7e3fdb3f0d3c0dd3cdf98f79563a1c1ca2b7d600dcc
- SSDEEP 24576:0xWVeyRYg4s2hz6A4O8b8ITDnl9FG3M5WSrIO3G:08Ygzuzj4O8b8ITDnl9FG3M5ef
- TLSH T12A95E62273F99115F6F36B709D764AA01A76BC62AE78C24E3248371D1F70AA0CD64737
- MD5 SHA1 SHA512 SSDEEP TLSH
Score6/10-
Adds Run key to start application
-
Checks installed software on the system
Looks up Uninstall key entries in the registry to enumerate software on the system.
-
Drops file in System32 directory