General
- Target 2026-10-26_f16ffecfec00259487266e79481c00b7_elex_glassworm_remcos_smoke-loader_stealc_stop_tofsee
- Size 1.9MB
- Sample261027-c3kylace39
- SHA256 c1f96d66426f787bc65db462b34e6e6292c37662397ebd871d422a215dc53c7e
- MD5 f16ffecfec00259487266e79481c00b7
- SHA1 dc09c524da9943275c3c3fde8bf59fcb4e681a8a
- SHA512 54021a1172719ecf202d294287fab507fdc861646b1c6b8ee454fb9eebf050a975485fee3de5406e9f775faa99352e31407964deea3df76aadf5c70528b49c34
- SSDEEP 24576:TxWVeyRYcLml4O8b8ITDnlYm9zgSo+sqVlZY0/8vw:T8YR4O8b8ITDnlYmO63F
- TLSH T170953ADC62A0CC13DC69ED3C09D649A0ED3DBC51596A47C6314FB7CB1EBA36C9812A1E
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
6/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-10-26_f16ffecfec00259487266e79481c00b7_elex_glassworm_remcos_smoke-loader_stealc_stop_tofsee.exe
Resource
win10v2004-20260911-en
9 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-10-26_f16ffecfec00259487266e79481c00b7_elex_glassworm_remcos_smoke-loader_stealc_stop_tofsee.exe
Resource
win11ltsc2024-20260911-en
9 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-10-26_f16ffecfec00259487266e79481c00b7_elex_glassworm_remcos_smoke-loader_stealc_stop_tofsee
- Size 1.9MB
- SHA256 c1f96d66426f787bc65db462b34e6e6292c37662397ebd871d422a215dc53c7e
- MD5 f16ffecfec00259487266e79481c00b7
- SHA1 dc09c524da9943275c3c3fde8bf59fcb4e681a8a
- SHA512 54021a1172719ecf202d294287fab507fdc861646b1c6b8ee454fb9eebf050a975485fee3de5406e9f775faa99352e31407964deea3df76aadf5c70528b49c34
- SSDEEP 24576:TxWVeyRYcLml4O8b8ITDnlYm9zgSo+sqVlZY0/8vw:T8YR4O8b8ITDnlYmO63F
- TLSH T170953ADC62A0CC13DC69ED3C09D649A0ED3DBC51596A47C6314FB7CB1EBA36C9812A1E
- MD5 SHA1 SHA512 SSDEEP TLSH
Score6/10-
Adds Run key to start application
-
Checks installed software on the system
Looks up Uninstall key entries in the registry to enumerate software on the system.
-
Drops file in System32 directory