General
- Target 2026-11-01_9d10bfac43376a0aeaa90f989f1be060_elex_glassworm_remcos_smoke-loader_stealc_stop_tofsee
- Size 1.9MB
- Sample261102-qvzzfacv6r
- SHA256 ac2c90d8533a4f665840b05bc470992b4ac2bc708f21e9dbe44b954b7e21209a
- MD5 9d10bfac43376a0aeaa90f989f1be060
- SHA1 b5df00e108f7228ef8de1af2656afadf55498cbf
- SHA512 a35d2a423ebae91d982f75ca5fb1a4ad574b77162888458937c18ae93602a966c580105d100fdeedf11362f10346b149df2421c687aa6b5f9cc80d99497bd267
- SSDEEP 24576:JxWVeyRYc4s2hzs4O8b8ITDnlGF9djjPKOD3z:J8Yczuzs4O8b8ITDnlGF9dr
- TLSH T1AE95B32373F99117F2F3EB3099754AB11A66BC5EAE78C64E3248375D1F70A60C960722
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
6/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-11-01_9d10bfac43376a0aeaa90f989f1be060_elex_glassworm_remcos_smoke-loader_stealc_stop_tofsee.exe
Resource
win10v2004-20260911-en
9 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-11-01_9d10bfac43376a0aeaa90f989f1be060_elex_glassworm_remcos_smoke-loader_stealc_stop_tofsee.exe
Resource
win11ltsc2024-20260911-en
9 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-11-01_9d10bfac43376a0aeaa90f989f1be060_elex_glassworm_remcos_smoke-loader_stealc_stop_tofsee
- Size 1.9MB
- SHA256 ac2c90d8533a4f665840b05bc470992b4ac2bc708f21e9dbe44b954b7e21209a
- MD5 9d10bfac43376a0aeaa90f989f1be060
- SHA1 b5df00e108f7228ef8de1af2656afadf55498cbf
- SHA512 a35d2a423ebae91d982f75ca5fb1a4ad574b77162888458937c18ae93602a966c580105d100fdeedf11362f10346b149df2421c687aa6b5f9cc80d99497bd267
- SSDEEP 24576:JxWVeyRYc4s2hzs4O8b8ITDnlGF9djjPKOD3z:J8Yczuzs4O8b8ITDnlGF9dr
- TLSH T1AE95B32373F99117F2F3EB3099754AB11A66BC5EAE78C64E3248375D1F70A60C960722
- MD5 SHA1 SHA512 SSDEEP TLSH
Score6/10-
Adds Run key to start application
-
Checks installed software on the system
Looks up Uninstall key entries in the registry to enumerate software on the system.
-
Drops file in System32 directory