General
- Target 2026-10-16_1b442fcf3c6abb8810309cd7ca7c77c1_elex_glassworm_remcos_smoke-loader_stealc_stop_tofsee
- Size 1.9MB
- Sample261017-2jfl7sev41
- SHA256 9a294f594b1d06c2d3225c22dee01523f78679326ddb1fd6e83ff2b9914d905c
- MD5 1b442fcf3c6abb8810309cd7ca7c77c1
- SHA1 0d957ec821158876abe78a8e002811c189556c6f
- SHA512 c46755194edf2dd18732d19897020234cc53ad749087eaae3e6295617280488ccbbb6bf14c88c125d318c534e9b22eebc243a249bf1d33d45627640f0a3a0ce5
- SSDEEP 24576:wxWVeyRY1R4s2hz0A4O8b8ITDnl9FRBL5R+rIGx:w8Ynzuzd4O8b8ITDnl9FRBL57E
- TLSH T10A95D62263F9D115F2F36B3099758AA01A76BC63AE78C14E7248375D1F70AA2CD21737
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
8/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-10-16_1b442fcf3c6abb8810309cd7ca7c77c1_elex_glassworm_remcos_smoke-loader_stealc_stop_tofsee.exe
Resource
win10v2004-20260911-en
10 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-10-16_1b442fcf3c6abb8810309cd7ca7c77c1_elex_glassworm_remcos_smoke-loader_stealc_stop_tofsee.exe
Resource
win11ltsc2024-20260911-en
10 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-10-16_1b442fcf3c6abb8810309cd7ca7c77c1_elex_glassworm_remcos_smoke-loader_stealc_stop_tofsee
- Size 1.9MB
- SHA256 9a294f594b1d06c2d3225c22dee01523f78679326ddb1fd6e83ff2b9914d905c
- MD5 1b442fcf3c6abb8810309cd7ca7c77c1
- SHA1 0d957ec821158876abe78a8e002811c189556c6f
- SHA512 c46755194edf2dd18732d19897020234cc53ad749087eaae3e6295617280488ccbbb6bf14c88c125d318c534e9b22eebc243a249bf1d33d45627640f0a3a0ce5
- SSDEEP 24576:wxWVeyRY1R4s2hz0A4O8b8ITDnl9FRBL5R+rIGx:w8Ynzuzd4O8b8ITDnl9FRBL57E
- TLSH T10A95D62263F9D115F2F36B3099758AA01A76BC63AE78C14E7248375D1F70AA2CD21737
- MD5 SHA1 SHA512 SSDEEP TLSH
Score8/10-
Drops file in Drivers directory
-
Adds Run key to start application
-
Checks installed software on the system
Looks up Uninstall key entries in the registry to enumerate software on the system.
-
Drops file in System32 directory