General

  • Target
    2026-04-18_8dfdc38895ad1bd9045056e48250b469_amadey_elex_glassworm_remcos_smoke-loader_stealc_stop_tofsee
  • Size 2.5MB
  • Sample260418-ef2zpsf13w
  • SHA256 5c20937067c4b2f3e9e0cf529f2ad12d6f1952ec0f2aa6931aec1b28a3f29522
  • MD5 SHA1 SHA512 SSDEEP TLSH

Malware Config

Targets

    • Target
      2026-04-18_8dfdc38895ad1bd9045056e48250b469_amadey_elex_glassworm_remcos_smoke-loader_stealc_stop_tofsee
    • Size 2.5MB
    • SHA256 5c20937067c4b2f3e9e0cf529f2ad12d6f1952ec0f2aa6931aec1b28a3f29522
    • MD5 SHA1 SHA512 SSDEEP TLSH
    • Adds Run key to start application

    • Checks installed software on the system

      Looks up Uninstall key entries in the registry to enumerate software on the system.

    • Drops file in System32 directory

MITRE ATT&CK Enterprise v16

Tasks