General
- Target 2026-10-22_4e35a3082f443b9a175260954bca66df_elex_glassworm_remcos_smoke-loader_stealc_stop_tofsee
- Size 1.3MB
- Sample261024-q21vbab15k
- SHA256 af0ed72544c08bfeb98cbb7619a1a6afdfeb4658246510831d8cbf977c1a0bb7
- MD5 4e35a3082f443b9a175260954bca66df
- SHA1 662a6742dd6b15227b81fbb18e627e073c09dec1
- SHA512 ef646954dad52dc4323812adebb8cfbfe62417e77a319db6418114c2d6f494f5c55b9cdae19fc058600d5da270f729964c2141ef66217e74600f4f2e66834a77
- SSDEEP 12288:mwKfOVRo9yRYPLv42X5sUSF14t24O8b8ITDnluRPiwAYpGHM0Hb0:mxWVeyRYDv4s2hzN4O8b8ITDnluzpWb0
- TLSH T16755D52066E4CE11F2FB763088754A202927BC515EF887CE334ABF5A7BB16A4CD65713
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
6/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-10-22_4e35a3082f443b9a175260954bca66df_elex_glassworm_remcos_smoke-loader_stealc_stop_tofsee.exe
Resource
win10v2004-20260911-en
9 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-10-22_4e35a3082f443b9a175260954bca66df_elex_glassworm_remcos_smoke-loader_stealc_stop_tofsee.exe
Resource
win11ltsc2024-20260911-en
9 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-10-22_4e35a3082f443b9a175260954bca66df_elex_glassworm_remcos_smoke-loader_stealc_stop_tofsee
- Size 1.3MB
- SHA256 af0ed72544c08bfeb98cbb7619a1a6afdfeb4658246510831d8cbf977c1a0bb7
- MD5 4e35a3082f443b9a175260954bca66df
- SHA1 662a6742dd6b15227b81fbb18e627e073c09dec1
- SHA512 ef646954dad52dc4323812adebb8cfbfe62417e77a319db6418114c2d6f494f5c55b9cdae19fc058600d5da270f729964c2141ef66217e74600f4f2e66834a77
- SSDEEP 12288:mwKfOVRo9yRYPLv42X5sUSF14t24O8b8ITDnluRPiwAYpGHM0Hb0:mxWVeyRYDv4s2hzN4O8b8ITDnluzpWb0
- TLSH T16755D52066E4CE11F2FB763088754A202927BC515EF887CE334ABF5A7BB16A4CD65713
- MD5 SHA1 SHA512 SSDEEP TLSH
Score6/10-
Adds Run key to start application
-
Checks installed software on the system
Looks up Uninstall key entries in the registry to enumerate software on the system.
-
Drops file in System32 directory