General
- Target 2026-10-30_d991d8c5b9a42a7c6e506c15f07d70d1_elex_glassworm_remcos_smoke-loader_stealc_stop_tofsee
- Size 1.3MB
- Sample261030-sp7hfaeh49
- SHA256 06e6b603560b0d8de9cf5eb582aecaabe073bca594538c3de97ed34496ab428c
- MD5 d991d8c5b9a42a7c6e506c15f07d70d1
- SHA1 dea244933b83367dc760beb9450842375e4f0569
- SHA512 7dc4d93252bb184790b354ee50c6cd16c1b0a28e0f9ee8a9c8a7a76ba7ce4c600992fd8e96dbc5ac0fdcf0b5b583095a4d6f78badbb29be5d9888506fb6c9a7c
- SSDEEP 12288:mwKfOVRo9yRY7zv42X5sUSF14t24O8b8ITDnluRPiwAYpGHM0Hb0:mxWVeyRYvv4s2hzN4O8b8ITDnluzpWb0
- TLSH T15255D52066E4CE11F2FB763088754A202927BC515EF887CE334ABF5A7BB16A4CD65713
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
6/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-10-30_d991d8c5b9a42a7c6e506c15f07d70d1_elex_glassworm_remcos_smoke-loader_stealc_stop_tofsee.exe
Resource
win10v2004-20260911-en
9 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-10-30_d991d8c5b9a42a7c6e506c15f07d70d1_elex_glassworm_remcos_smoke-loader_stealc_stop_tofsee.exe
Resource
win11ltsc2024-20260911-en
9 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-10-30_d991d8c5b9a42a7c6e506c15f07d70d1_elex_glassworm_remcos_smoke-loader_stealc_stop_tofsee
- Size 1.3MB
- SHA256 06e6b603560b0d8de9cf5eb582aecaabe073bca594538c3de97ed34496ab428c
- MD5 d991d8c5b9a42a7c6e506c15f07d70d1
- SHA1 dea244933b83367dc760beb9450842375e4f0569
- SHA512 7dc4d93252bb184790b354ee50c6cd16c1b0a28e0f9ee8a9c8a7a76ba7ce4c600992fd8e96dbc5ac0fdcf0b5b583095a4d6f78badbb29be5d9888506fb6c9a7c
- SSDEEP 12288:mwKfOVRo9yRY7zv42X5sUSF14t24O8b8ITDnluRPiwAYpGHM0Hb0:mxWVeyRYvv4s2hzN4O8b8ITDnluzpWb0
- TLSH T15255D52066E4CE11F2FB763088754A202927BC515EF887CE334ABF5A7BB16A4CD65713
- MD5 SHA1 SHA512 SSDEEP TLSH
Score6/10-
Adds Run key to start application
-
Checks installed software on the system
Looks up Uninstall key entries in the registry to enumerate software on the system.
-
Drops file in System32 directory