General
- Target 2026-08-09_9672d65040c196ecacbdebea74881797_amadey_elex_glassworm_remcos_smoke-loader_stealc_stop_tofsee
- Size 992KB
- Sample260809-1mezeawdra
- SHA256 15398288b733e7929d23e1702e9a66a06cd391c43825282ab3551a64baae24e1
- MD5 9672d65040c196ecacbdebea74881797
- SHA1 ff1127022a478ef4bc734351a4fe6008fc5a549a
- SHA512 367a7c6259947c94583c2b8f634d4d2981c476399eff0a3742a953f2f0f9782d19e4236a80ab04863b3cc47f7b34a53f4d2ec5ffa443661facaeb3b98f5a0f53
- SSDEEP 12288:0wKfOVRo9yRYeAQ7O4O8b8ITDnlz0UmuTx5KEZuF3B:0xWVeyRYeAQ7O4O8b8ITDnlhCB
- TLSH T1FC25B62173E89114F5F37B309EB94AA46A677C516EB5C64F3688334E1F71AA0CD22723
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
6/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-08-09_9672d65040c196ecacbdebea74881797_amadey_elex_glassworm_remcos_smoke-loader_stealc_stop_tofsee.exe
Resource
win10v2004-20260513-en
8 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-08-09_9672d65040c196ecacbdebea74881797_amadey_elex_glassworm_remcos_smoke-loader_stealc_stop_tofsee.exe
Resource
win11ltsc2024-20260709-en
8 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-08-09_9672d65040c196ecacbdebea74881797_amadey_elex_glassworm_remcos_smoke-loader_stealc_stop_tofsee
- Size 992KB
- SHA256 15398288b733e7929d23e1702e9a66a06cd391c43825282ab3551a64baae24e1
- MD5 9672d65040c196ecacbdebea74881797
- SHA1 ff1127022a478ef4bc734351a4fe6008fc5a549a
- SHA512 367a7c6259947c94583c2b8f634d4d2981c476399eff0a3742a953f2f0f9782d19e4236a80ab04863b3cc47f7b34a53f4d2ec5ffa443661facaeb3b98f5a0f53
- SSDEEP 12288:0wKfOVRo9yRYeAQ7O4O8b8ITDnlz0UmuTx5KEZuF3B:0xWVeyRYeAQ7O4O8b8ITDnlhCB
- TLSH T1FC25B62173E89114F5F37B309EB94AA46A677C516EB5C64F3688334E1F71AA0CD22723
- MD5 SHA1 SHA512 SSDEEP TLSH
Score6/10-
Adds Run key to start application
-
Checks installed software on the system
Looks up Uninstall key entries in the registry to enumerate software on the system.
-
Drops file in System32 directory