General
- Target 2026-10-13_f80a083d33c0c5c7660a7a64e6e80971_elex_glassworm_remcos_smoke-loader_stealc_stop_tofsee
- Size 1.5MB
- Sample261014-a295zset7j
- SHA256 2fdf1cca5c95002f68ecd9ce820067b867a209f5e2c4314dd20880dda1ace0da
- MD5 f80a083d33c0c5c7660a7a64e6e80971
- SHA1 b99dfc5cd42c6b5d6a7f5b9150a71ed8e6e639b2
- SHA512 42cf588ba2a5dd3a1311ca24df53ec6dad936e935e46255fc60d7ffef9ff10264398e45473f06b068a11cf6161bac4b9fe08e8101119a0640200c278437f9611
- SSDEEP 24576:ExWVeyRYWxv4s2hzO4O8b8ITDnl7FDw6fP:E8YIzuzO4O8b8ITDnl7F063
- TLSH T1EE75A53263F98225F2F77B30997946611A77BC51AE79E20E2244322D4E70BB0DD65B33
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
6/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-10-13_f80a083d33c0c5c7660a7a64e6e80971_elex_glassworm_remcos_smoke-loader_stealc_stop_tofsee.exe
Resource
win10v2004-20260911-en
9 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-10-13_f80a083d33c0c5c7660a7a64e6e80971_elex_glassworm_remcos_smoke-loader_stealc_stop_tofsee.exe
Resource
win11ltsc2024-20260911-en
9 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-10-13_f80a083d33c0c5c7660a7a64e6e80971_elex_glassworm_remcos_smoke-loader_stealc_stop_tofsee
- Size 1.5MB
- SHA256 2fdf1cca5c95002f68ecd9ce820067b867a209f5e2c4314dd20880dda1ace0da
- MD5 f80a083d33c0c5c7660a7a64e6e80971
- SHA1 b99dfc5cd42c6b5d6a7f5b9150a71ed8e6e639b2
- SHA512 42cf588ba2a5dd3a1311ca24df53ec6dad936e935e46255fc60d7ffef9ff10264398e45473f06b068a11cf6161bac4b9fe08e8101119a0640200c278437f9611
- SSDEEP 24576:ExWVeyRYWxv4s2hzO4O8b8ITDnl7FDw6fP:E8YIzuzO4O8b8ITDnl7F063
- TLSH T1EE75A53263F98225F2F77B30997946611A77BC51AE79E20E2244322D4E70BB0DD65B33
- MD5 SHA1 SHA512 SSDEEP TLSH
Score6/10-
Adds Run key to start application
-
Checks installed software on the system
Looks up Uninstall key entries in the registry to enumerate software on the system.
-
Drops file in System32 directory