General
- Target 2026-10-26_ca0338283b73bab1abb96fbe3a394cc5_elex_glassworm_remcos_smoke-loader_stealc_stop_tofsee
- Size 3.0MB
- Sample261027-hlphca11gw
- SHA256 0c39e98468e76d7723a7c00f660180df572fad031d4f624300400f85fa93fe6a
- MD5 ca0338283b73bab1abb96fbe3a394cc5
- SHA1 c3828ac25c4c3d20359d1c2736b1902b5162ecba
- SHA512 1e0115a875038c0e0bbee4921203040d4caae060c5101fac27ee5398df79a948ab84f0a22177b293ec184b274ff008a69e2ceb24bee9fa02e603f9c21488a27e
- SSDEEP 24576:ExWVeyRYSx4s2hzldEs1xTVIlz7X9zOo4PjnikEpx/nLWvJ6QO:E8YWzuzldEWSR7Xgo4TiRPnLWvJa
- TLSH T13BE58ED27FE0F160E0E25E353D2B92BC9A237C659EF2924B3647F31D5A32250B915326
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
6/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-10-26_ca0338283b73bab1abb96fbe3a394cc5_elex_glassworm_remcos_smoke-loader_stealc_stop_tofsee.exe
Resource
win10v2004-20260911-en
9 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-10-26_ca0338283b73bab1abb96fbe3a394cc5_elex_glassworm_remcos_smoke-loader_stealc_stop_tofsee.exe
Resource
win11ltsc2024-20260911-en
9 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-10-26_ca0338283b73bab1abb96fbe3a394cc5_elex_glassworm_remcos_smoke-loader_stealc_stop_tofsee
- Size 3.0MB
- SHA256 0c39e98468e76d7723a7c00f660180df572fad031d4f624300400f85fa93fe6a
- MD5 ca0338283b73bab1abb96fbe3a394cc5
- SHA1 c3828ac25c4c3d20359d1c2736b1902b5162ecba
- SHA512 1e0115a875038c0e0bbee4921203040d4caae060c5101fac27ee5398df79a948ab84f0a22177b293ec184b274ff008a69e2ceb24bee9fa02e603f9c21488a27e
- SSDEEP 24576:ExWVeyRYSx4s2hzldEs1xTVIlz7X9zOo4PjnikEpx/nLWvJ6QO:E8YWzuzldEWSR7Xgo4TiRPnLWvJa
- TLSH T13BE58ED27FE0F160E0E25E353D2B92BC9A237C659EF2924B3647F31D5A32250B915326
- MD5 SHA1 SHA512 SSDEEP TLSH
Score6/10-
Adds Run key to start application
-
Checks installed software on the system
Looks up Uninstall key entries in the registry to enumerate software on the system.
-
Drops file in System32 directory