General
- Target 2026-10-31_a95790be86c01a131607a99ad65fe9b4_elex_glassworm_remcos_smoke-loader_stealc_stop_tofsee
- Size 1.7MB
- Sample261101-1mlryszy2m
- SHA256 d4d921ba85c7e6cc692545fc8f7758a38270b0beefb30a70025de7aae6199d6b
- MD5 a95790be86c01a131607a99ad65fe9b4
- SHA1 012385a5acb2cc0ae8e2fe54a11e5d236592878e
- SHA512 4fc9de9a707ef211667cfae5d3643a8574b345eff8736b549b622f1de770651a2850317a7ff92af8eb004a3b234194926da88578062b624fc7e8ae10c15da5f5
- SSDEEP 24576:hxWVeyRY2VjDb44/0669K4s2hzO4O8b8ITDnl7FL6HR:h8Y4H9xzuzO4O8b8ITDnl7FL6x
- TLSH T13E85D73263F98214F2F77B3099B546611A77BC52AE79D60E2244322D4E70BB0DE65B33
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
6/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-10-31_a95790be86c01a131607a99ad65fe9b4_elex_glassworm_remcos_smoke-loader_stealc_stop_tofsee.exe
Resource
win10v2004-20260911-en
9 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-10-31_a95790be86c01a131607a99ad65fe9b4_elex_glassworm_remcos_smoke-loader_stealc_stop_tofsee.exe
Resource
win11ltsc2024-20260911-en
9 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-10-31_a95790be86c01a131607a99ad65fe9b4_elex_glassworm_remcos_smoke-loader_stealc_stop_tofsee
- Size 1.7MB
- SHA256 d4d921ba85c7e6cc692545fc8f7758a38270b0beefb30a70025de7aae6199d6b
- MD5 a95790be86c01a131607a99ad65fe9b4
- SHA1 012385a5acb2cc0ae8e2fe54a11e5d236592878e
- SHA512 4fc9de9a707ef211667cfae5d3643a8574b345eff8736b549b622f1de770651a2850317a7ff92af8eb004a3b234194926da88578062b624fc7e8ae10c15da5f5
- SSDEEP 24576:hxWVeyRY2VjDb44/0669K4s2hzO4O8b8ITDnl7FL6HR:h8Y4H9xzuzO4O8b8ITDnl7FL6x
- TLSH T13E85D73263F98214F2F77B3099B546611A77BC52AE79D60E2244322D4E70BB0DE65B33
- MD5 SHA1 SHA512 SSDEEP TLSH
Score6/10-
Adds Run key to start application
-
Checks installed software on the system
Looks up Uninstall key entries in the registry to enumerate software on the system.
-
Drops file in System32 directory