General
- Target 2026-10-11_8b171b5b20de94e0c88545ff1f06395d_elex_glassworm_remcos_smoke-loader_stealc_stop_tofsee
- Size 2.5MB
- Sample261012-t493jsysbs
- SHA256 0c181bcd2fdfc56fa2c99549fb40b17ee873a423f5804d5a8d06d25d7f1e6b62
- MD5 8b171b5b20de94e0c88545ff1f06395d
- SHA1 004125ccb45e750048d536870e6fe5cfd82b244e
- SHA512 c38f9b8003b57b63669d820d5b7ec3765bdb1cc519c76fc3cdcfba33a108cab7f91c61f814b18b429449cee3cdf9ffe2146859237b1ec45f5b72d6f365ed8c87
- SSDEEP 49152:P8YE4O8b8ITDnltP/tSR7Xgo4TiRPnLWvJa:0agR7Xn4TiRCvJa
- TLSH T1E9C59D22B5D0C411E6E33E30496A8BA4E9367C016AE45A87374EBF4F6FB13A1FD15325
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
6/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-10-11_8b171b5b20de94e0c88545ff1f06395d_elex_glassworm_remcos_smoke-loader_stealc_stop_tofsee.exe
Resource
win10v2004-20260911-en
9 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-10-11_8b171b5b20de94e0c88545ff1f06395d_elex_glassworm_remcos_smoke-loader_stealc_stop_tofsee.exe
Resource
win11ltsc2024-20260911-en
9 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-10-11_8b171b5b20de94e0c88545ff1f06395d_elex_glassworm_remcos_smoke-loader_stealc_stop_tofsee
- Size 2.5MB
- SHA256 0c181bcd2fdfc56fa2c99549fb40b17ee873a423f5804d5a8d06d25d7f1e6b62
- MD5 8b171b5b20de94e0c88545ff1f06395d
- SHA1 004125ccb45e750048d536870e6fe5cfd82b244e
- SHA512 c38f9b8003b57b63669d820d5b7ec3765bdb1cc519c76fc3cdcfba33a108cab7f91c61f814b18b429449cee3cdf9ffe2146859237b1ec45f5b72d6f365ed8c87
- SSDEEP 49152:P8YE4O8b8ITDnltP/tSR7Xgo4TiRPnLWvJa:0agR7Xn4TiRCvJa
- TLSH T1E9C59D22B5D0C411E6E33E30496A8BA4E9367C016AE45A87374EBF4F6FB13A1FD15325
- MD5 SHA1 SHA512 SSDEEP TLSH
Score6/10-
Adds Run key to start application
-
Checks installed software on the system
Looks up Uninstall key entries in the registry to enumerate software on the system.
-
Drops file in System32 directory