Analysis
- max time kernel
149s - max time network
152s - platform
windows10-2004_x64 - resource
win10v2004-20260513-en - resource tags
arch:x64arch:x86image:win10v2004-20260513-enlocale:en-usos:windows10-2004-x64systemwindows - submitted
13/07/2026, 08:50
Static task
static1
4 signatures
Behavioral task
behavioral1
Sample
2026-07-13_6a446da2d11de7e51c92f21db9d2bb51_amadey_elex_glassworm_magniber_remcos_smoke-loader.exe
Resource
win10v2004-20260513-en
3 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-07-13_6a446da2d11de7e51c92f21db9d2bb51_amadey_elex_glassworm_magniber_remcos_smoke-loader.exe
Resource
win11ltsc2024-20260709-en
3 signatures
150 seconds
General
- Target 2026-07-13_6a446da2d11de7e51c92f21db9d2bb51_amadey_elex_glassworm_magniber_remcos_smoke-loader.exe
- Size 12.0MB
- Sample260713-kr3chaew2l
- SHA256 242071e3817cfa71d8b0fb227885a6fa39b1fff2863f6b1635fbd898af3ab4a7
- MD5 6a446da2d11de7e51c92f21db9d2bb51
- SHA1 c1b1d9e10f624b4c8d8cfdfac2656fe08fe9e0f9
- SHA512 c8c83ea35637417718bd1995538689fa304536c50c7e71f0f3d1db3f41df987998d283811d9f88477d122e20df564316afc0c880e138f41d6d59dbe112e33bf5
- SSDEEP 98304:LZMrHu8lM5+RD3f3Iz/vuWTCLP9Pk6gAK6n4ldyNhSMCkL7ul5D9tRGa:LZMK82u38uL1kehn4iSMCo7693
- TLSH T15CC62812F291C416E87405B014174AB475B4BE492F6CD9B6BCCA772C2AF61ECB82F7E1
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
9/10
Malware Config
Signatures
- Detects Windows executables referencing non-Windows User-Agents 1 IoCs
resource yara_rule behavioral1/memory/5036-0-0x0000025613C90000-0x000002561488C000-memory.dmp INDICATOR_SUSPICIOUS_EXE_NoneWindowsUA - Detects executables (downlaoders) containing URLs to raw contents of a paste 1 IoCs
resource yara_rule behavioral1/memory/5036-0-0x0000025613C90000-0x000002561488C000-memory.dmp INDICATOR_SUSPICIOUS_EXE_RawPaste_URL - Detects executables using Telegram Chat Bot 1 IoCs
resource yara_rule behavioral1/memory/5036-0-0x0000025613C90000-0x000002561488C000-memory.dmp INDICATOR_SUSPICIOUS_EXE_TelegramChatBot