General
- Target 2026-07-31_24af183554a461bfab06b8c4fd9f891f_amadey_elex_glassworm_remcos_smoke-loader_stealc_stop_tofsee
- Size 1.6MB
- Sample260731-xmw15sfb64
- SHA256 5ebac0222096d21444b79d3c2f7f6e6ee859e12e6b0e92be67faefc59e3b52ad
- MD5 24af183554a461bfab06b8c4fd9f891f
- SHA1 af4a24c234046a8c7d11c810cae3ee7fb5c38211
- SHA512 caf70a163ca3d10e2b460a741be3cbb528e1d82e1e641ba34af55d7d6bb0947a9738b22d70a9f6aa0a1b2bf5d23250686be566725563e7d1ec6bdd171de124c4
- SSDEEP 24576:qxWVeyRYZ4s2hzntVIJqt4O8b8ITDnl+Kxe10FguKX:q8YZzuzntVxt4O8b8ITDnlbx8t
- TLSH T1CA752722A6E94111F4B33F7099B58964E672BC969775819F718C330E5B71BE0CA33B23
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
6/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-07-31_24af183554a461bfab06b8c4fd9f891f_amadey_elex_glassworm_remcos_smoke-loader_stealc_stop_tofsee.exe
Resource
win10v2004-20260513-en
8 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-07-31_24af183554a461bfab06b8c4fd9f891f_amadey_elex_glassworm_remcos_smoke-loader_stealc_stop_tofsee.exe
Resource
win11ltsc2024-20260709-en
8 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-07-31_24af183554a461bfab06b8c4fd9f891f_amadey_elex_glassworm_remcos_smoke-loader_stealc_stop_tofsee
- Size 1.6MB
- SHA256 5ebac0222096d21444b79d3c2f7f6e6ee859e12e6b0e92be67faefc59e3b52ad
- MD5 24af183554a461bfab06b8c4fd9f891f
- SHA1 af4a24c234046a8c7d11c810cae3ee7fb5c38211
- SHA512 caf70a163ca3d10e2b460a741be3cbb528e1d82e1e641ba34af55d7d6bb0947a9738b22d70a9f6aa0a1b2bf5d23250686be566725563e7d1ec6bdd171de124c4
- SSDEEP 24576:qxWVeyRYZ4s2hzntVIJqt4O8b8ITDnl+Kxe10FguKX:q8YZzuzntVxt4O8b8ITDnlbx8t
- TLSH T1CA752722A6E94111F4B33F7099B58964E672BC969775819F718C330E5B71BE0CA33B23
- MD5 SHA1 SHA512 SSDEEP TLSH
Score6/10-
Adds Run key to start application
-
Checks installed software on the system
Looks up Uninstall key entries in the registry to enumerate software on the system.
-
Drops file in System32 directory