General
- Target 2026-04-23_441a9b33be74d07bdc1141957936c7e8_amadey_elex_glassworm_remcos_smoke-loader_vidar
- Size 7.1MB
- Sample260423-wtbs4sdt2j
- SHA256 f327075338a7b69c7308ec24575a86a554e772081c3f9854c4a55acc0545bf5b
- MD5 441a9b33be74d07bdc1141957936c7e8
- SHA1 d5d7cebd184f87155580c1416d902d50f8876c5d
- SHA512 fc4d4d8e826d81f8cb15db4dcc54a868614f3dcb61fa6c59f7b9ab3566482f35783ca37ed85bf9c6eb42c62f258042046568488885a6c1d35b954e036a362fa1
- SSDEEP 196608:wgwkZilI1rWqv3dIB3+IEf9jYFHxVzWq:NBZi25d8S
- TLSH T1CC766D2962F801E9E0FBD2BDCEA6951AE5B17C61473592CF109413AE0F37AF05D36B12
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
10/10
Static task
static1
2 signatures
Behavioral task
behavioral1
Sample
2026-04-23_441a9b33be74d07bdc1141957936c7e8_amadey_elex_glassworm_remcos_smoke-loader_vidar.exe
Resource
win10v2004-20260130-en
10 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-04-23_441a9b33be74d07bdc1141957936c7e8_amadey_elex_glassworm_remcos_smoke-loader_vidar.exe
Resource
win11-20260130-en
10 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-04-23_441a9b33be74d07bdc1141957936c7e8_amadey_elex_glassworm_remcos_smoke-loader_vidar
- Size 7.1MB
- SHA256 f327075338a7b69c7308ec24575a86a554e772081c3f9854c4a55acc0545bf5b
- MD5 441a9b33be74d07bdc1141957936c7e8
- SHA1 d5d7cebd184f87155580c1416d902d50f8876c5d
- SHA512 fc4d4d8e826d81f8cb15db4dcc54a868614f3dcb61fa6c59f7b9ab3566482f35783ca37ed85bf9c6eb42c62f258042046568488885a6c1d35b954e036a362fa1
- SSDEEP 196608:wgwkZilI1rWqv3dIB3+IEf9jYFHxVzWq:NBZi25d8S
- TLSH T1CC766D2962F801E9E0FBD2BDCEA6951AE5B17C61473592CF109413AE0F37AF05D36B12
- MD5 SHA1 SHA512 SSDEEP TLSH
Score9/10-
Detects executables embedding registry key / value combination indicative of disabling Windows Defen
-
Executes dropped EXE
-
Loads dropped DLL
-
Drops file in System32 directory