General
- Target 2026-04-18_8dfdc38895ad1bd9045056e48250b469_amadey_elex_glassworm_remcos_smoke-loader_stealc_stop_tofsee
- Size 2.5MB
- Sample260418-ef2zpsf13w
- SHA256 5c20937067c4b2f3e9e0cf529f2ad12d6f1952ec0f2aa6931aec1b28a3f29522
- MD5 8dfdc38895ad1bd9045056e48250b469
- SHA1 25d721e45d95d9b2980e2d4592e058d2c971370d
- SHA512 a18ab263fc9cd5b3cc237aa969f3ec2f1a5c5c2e5c36bb531c8407c1718d75fe849da5da8c1f43d9a67fd0744ff8035a122d5b110fd4898e8c22f048accaccce
- SSDEEP 24576:KxWVeyRYswzYDteYIp6TuOw9HMobQi3AlbWAcAYDgWlZiibmwa+5v0DmZlbmw7o3:K8YQCzsobQrhRR+mibhv0DmT6I6DkS
- TLSH T110C58C12B7E85115F5F32F309EF64294DB36BC616F39C64F7289720E1E71B809A62722
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
6/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-04-18_8dfdc38895ad1bd9045056e48250b469_amadey_elex_glassworm_remcos_smoke-loader_stealc_stop_tofsee.exe
Resource
win10v2004-20260130-en
8 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-04-18_8dfdc38895ad1bd9045056e48250b469_amadey_elex_glassworm_remcos_smoke-loader_stealc_stop_tofsee.exe
Resource
win11-20260130-en
8 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-04-18_8dfdc38895ad1bd9045056e48250b469_amadey_elex_glassworm_remcos_smoke-loader_stealc_stop_tofsee
- Size 2.5MB
- SHA256 5c20937067c4b2f3e9e0cf529f2ad12d6f1952ec0f2aa6931aec1b28a3f29522
- MD5 8dfdc38895ad1bd9045056e48250b469
- SHA1 25d721e45d95d9b2980e2d4592e058d2c971370d
- SHA512 a18ab263fc9cd5b3cc237aa969f3ec2f1a5c5c2e5c36bb531c8407c1718d75fe849da5da8c1f43d9a67fd0744ff8035a122d5b110fd4898e8c22f048accaccce
- SSDEEP 24576:KxWVeyRYswzYDteYIp6TuOw9HMobQi3AlbWAcAYDgWlZiibmwa+5v0DmZlbmw7o3:K8YQCzsobQrhRR+mibhv0DmT6I6DkS
- TLSH T110C58C12B7E85115F5F32F309EF64294DB36BC616F39C64F7289720E1E71B809A62722
- MD5 SHA1 SHA512 SSDEEP TLSH
Score6/10-
Adds Run key to start application
-
Checks installed software on the system
Looks up Uninstall key entries in the registry to enumerate software on the system.
-
Drops file in System32 directory