General
- Target 2026-08-09_88c380039a2f68a2f42679b8838971f0_amadey_elex_glassworm_remcos_smoke-loader_stealc_stop_tofsee
- Size 993KB
- Sample260809-1mt4bsej5v
- SHA256 1b12b9030bdf3133f49cb3711bc9094a4ff874de4ed4d0d2f7055b10706c1b3e
- MD5 88c380039a2f68a2f42679b8838971f0
- SHA1 1935d86e7e98733da804d236518be244ac74f676
- SHA512 d67d6aef1b537b8506215b09a8dea36d7c1249d08e3463ceb0dc90c940994cf0b332f6b9c82d2c01f5060fb9c58000d0904dabd51aa9b7775914218400c25e21
- SSDEEP 12288:swKfOVRo9yRYcXQ7O4O8b8ITDnlz0UmuTx5KEZuF49:sxWVeyRYaQ7O4O8b8ITDnlhp9
- TLSH T12F25B62173E89114F5F37B309EB94AA46A677C516EB5C64F3688334E1F71AA0CD22723
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
6/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-08-09_88c380039a2f68a2f42679b8838971f0_amadey_elex_glassworm_remcos_smoke-loader_stealc_stop_tofsee.exe
Resource
win10v2004-20260513-en
8 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-08-09_88c380039a2f68a2f42679b8838971f0_amadey_elex_glassworm_remcos_smoke-loader_stealc_stop_tofsee.exe
Resource
win11ltsc2024-20260709-en
8 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-08-09_88c380039a2f68a2f42679b8838971f0_amadey_elex_glassworm_remcos_smoke-loader_stealc_stop_tofsee
- Size 993KB
- SHA256 1b12b9030bdf3133f49cb3711bc9094a4ff874de4ed4d0d2f7055b10706c1b3e
- MD5 88c380039a2f68a2f42679b8838971f0
- SHA1 1935d86e7e98733da804d236518be244ac74f676
- SHA512 d67d6aef1b537b8506215b09a8dea36d7c1249d08e3463ceb0dc90c940994cf0b332f6b9c82d2c01f5060fb9c58000d0904dabd51aa9b7775914218400c25e21
- SSDEEP 12288:swKfOVRo9yRYcXQ7O4O8b8ITDnlz0UmuTx5KEZuF49:sxWVeyRYaQ7O4O8b8ITDnlhp9
- TLSH T12F25B62173E89114F5F37B309EB94AA46A677C516EB5C64F3688334E1F71AA0CD22723
- MD5 SHA1 SHA512 SSDEEP TLSH
Score6/10-
Adds Run key to start application
-
Checks installed software on the system
Looks up Uninstall key entries in the registry to enumerate software on the system.
-
Drops file in System32 directory