General
- Target 2026-10-13_ea3e634f5475a1a10c391f87aada706c_elex_glassworm_remcos_smoke-loader_stealc_stop_tofsee
- Size 1.6MB
- Sample261014-cxt93sxtfx
- SHA256 c412f4d45d01f917b2f2806cdfbe2aed9ca8b91b9b222f61ce8ab954b9cb955a
- MD5 ea3e634f5475a1a10c391f87aada706c
- SHA1 bc62362a909737fa5ef206857f41c48d1a992370
- SHA512 7ffd8e8376b91e888858467cdad7c717974769be79556cc60532464cfc1b1834ef26e1696fc1555d25bfca22f7b076927d415c7b8fec9c7fa426fb24d8251e8a
- SSDEEP 24576:nxWVeyRYKjv4s2hz+4O8b8ITDnl7FIH+I6M:n8YQzuz+4O8b8ITDnl7FIH+Id
- TLSH T14275B53263F98215F2F77B30997946611A77BC52AE79D20E2244322D4E70BB0DE65B33
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
8/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-10-13_ea3e634f5475a1a10c391f87aada706c_elex_glassworm_remcos_smoke-loader_stealc_stop_tofsee.exe
Resource
win10v2004-20260911-en
10 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-10-13_ea3e634f5475a1a10c391f87aada706c_elex_glassworm_remcos_smoke-loader_stealc_stop_tofsee.exe
Resource
win11ltsc2024-20260911-en
10 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-10-13_ea3e634f5475a1a10c391f87aada706c_elex_glassworm_remcos_smoke-loader_stealc_stop_tofsee
- Size 1.6MB
- SHA256 c412f4d45d01f917b2f2806cdfbe2aed9ca8b91b9b222f61ce8ab954b9cb955a
- MD5 ea3e634f5475a1a10c391f87aada706c
- SHA1 bc62362a909737fa5ef206857f41c48d1a992370
- SHA512 7ffd8e8376b91e888858467cdad7c717974769be79556cc60532464cfc1b1834ef26e1696fc1555d25bfca22f7b076927d415c7b8fec9c7fa426fb24d8251e8a
- SSDEEP 24576:nxWVeyRYKjv4s2hz+4O8b8ITDnl7FIH+I6M:n8YQzuz+4O8b8ITDnl7FIH+Id
- TLSH T14275B53263F98215F2F77B30997946611A77BC52AE79D20E2244322D4E70BB0DE65B33
- MD5 SHA1 SHA512 SSDEEP TLSH
Score8/10-
Drops file in Drivers directory
-
Adds Run key to start application
-
Checks installed software on the system
Looks up Uninstall key entries in the registry to enumerate software on the system.
-
Drops file in System32 directory