General
- Target 2026-10-16_98a8caa71fe338127bd1f56b35d89ded_elex_glassworm_remcos_smoke-loader_stealc_stop_tofsee
- Size 2.7MB
- Sample261017-nfbbesew4s
- SHA256 833bf02223f844230463a82167bb484f3d92b135428b65c5838a6d114b157c64
- MD5 98a8caa71fe338127bd1f56b35d89ded
- SHA1 5d3269e735c8181f5e0dce3e8d9afd79eebc6998
- SHA512 8e2ad5f1c067b6aebfe3b0bc2f85caf9a03885f71e6f5b8402b209fda9c04a826074dad636515801968dd2a1f944f8fa7c6d2967fa04d53e891419c6af07ac50
- SSDEEP 24576:TxWVeyRYprt4s2hzB4O8b8ITDnl1FpAoqeStw:T8YDzuzB4O8b8ITDnl1FpAoqI
- TLSH T1D5D5B42173F8D515F2F33B30AD754AA41A26BC1299F8854E334ABB4E2FB1960CD61727
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
6/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-10-16_98a8caa71fe338127bd1f56b35d89ded_elex_glassworm_remcos_smoke-loader_stealc_stop_tofsee.exe
Resource
win10v2004-20260911-en
9 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-10-16_98a8caa71fe338127bd1f56b35d89ded_elex_glassworm_remcos_smoke-loader_stealc_stop_tofsee.exe
Resource
win11ltsc2024-20260911-en
9 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-10-16_98a8caa71fe338127bd1f56b35d89ded_elex_glassworm_remcos_smoke-loader_stealc_stop_tofsee
- Size 2.7MB
- SHA256 833bf02223f844230463a82167bb484f3d92b135428b65c5838a6d114b157c64
- MD5 98a8caa71fe338127bd1f56b35d89ded
- SHA1 5d3269e735c8181f5e0dce3e8d9afd79eebc6998
- SHA512 8e2ad5f1c067b6aebfe3b0bc2f85caf9a03885f71e6f5b8402b209fda9c04a826074dad636515801968dd2a1f944f8fa7c6d2967fa04d53e891419c6af07ac50
- SSDEEP 24576:TxWVeyRYprt4s2hzB4O8b8ITDnl1FpAoqeStw:T8YDzuzB4O8b8ITDnl1FpAoqI
- TLSH T1D5D5B42173F8D515F2F33B30AD754AA41A26BC1299F8854E334ABB4E2FB1960CD61727
- MD5 SHA1 SHA512 SSDEEP TLSH
Score6/10-
Adds Run key to start application
-
Checks installed software on the system
Looks up Uninstall key entries in the registry to enumerate software on the system.
-
Drops file in System32 directory