General

  • Target
    2026-05-16_dc95308828f6dbf3a2202817950edd21_elex_glassworm_hijackloader_poet-rat_remcos_stop_tobfy
  • Size 4.6MB
  • Sample260516-3kshtsav8s
  • SHA256 4d3ab25a39172c2e1275c979f763af7bb384902c22e0800f8f75b9227e33c755
  • MD5 SHA1 SHA512 SSDEEP TLSH
Score
1/10

Malware Config

Signatures

File Explorer

  • 2026-05-16_dc95308828f6dbf3a2202817950edd21_elex_glassworm_hijackloader_poet-rat_remcos_stop_tobfy
    .exe 4.6MB

2026-05-16_dc95308828f6dbf3a2202817950edd21_elex_glassworm_hijackloader_poet-rat_remcos_stop_tobfy

  • IMPHASH df0dec363100a6585cce92e760de07c0
  • SHA256 4d3ab25a39172c2e1275c979f763af7bb384902c22e0800f8f75b9227e33c755
  • MD5 SHA1 SHA512 SSDEEP TLSH
Digest
4a:49:a9:a9:5d:f5:08:29:4c:75:41:ca:cf:d9:4f:36:9e:1d:2d:96:41:fa:7e:ff:e2:e9:bf:60:71:52:6c:aa
Digest Algorithm
sha256
PE Digests Matches
Trusted
Signing Certificate
SERIALNUMBER=4489370,CN=NCH Software\, Inc.,O=NCH Software\, Inc.,L=Greenwood Village,ST=Colorado,C=US,2.5.4.15=#131450726976617465204f7267616e697a6174696f6e,1.3.6.1.4.1.311.60.2.1.2=#130844656c6177617265,1.3.6.1.4.1.311.60.2.1.3=#13025553
Digest
72:27:14:d7:67:1f:d2:0f:f8:a5:e8:95:0c:fa:27:05:64:f5:89:5e
Digest Algorithm
sha1
PE Digests Matches
Trusted
Signing Certificate
SERIALNUMBER=4489370,CN=NCH Software\, Inc.,O=NCH Software\, Inc.,L=Greenwood Village,ST=Colorado,C=US,2.5.4.15=#131450726976617465204f7267616e697a6174696f6e,1.3.6.1.4.1.311.60.2.1.2=#130844656c6177617265,1.3.6.1.4.1.311.60.2.1.3=#13025553
Minor OS version
0
Major OS version
4
Entry point
2246642
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_GUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LARGE_ADDRESS_AWARE IMAGE_FILE_32BIT_MACHINE
PDB paths
c:\sourcecode\debut\release\Debut.pdb