General

  • Target
    2026-08-16_5f2372d220cd9c1ace2d49416b91bd49_elex_glassworm_poet-rat_remcos_stop_tobfy
  • Size 16.7MB
  • Sample260816-e32x8abc22
  • SHA256 0a9e55a67af125cd841828f258db6aa42484cee620de0d0590f4e77489406577
  • MD5 SHA1 SHA512 SSDEEP TLSH
Score
1/10

Malware Config

Signatures

File Explorer

  • 2026-08-16_5f2372d220cd9c1ace2d49416b91bd49_elex_glassworm_poet-rat_remcos_stop_tobfy
    .exe 16.7MB

2026-08-16_5f2372d220cd9c1ace2d49416b91bd49_elex_glassworm_poet-rat_remcos_stop_tobfy

  • IMPHASH c0d68f93dda0fb0edea443b0c2b1249b
  • SHA256 0a9e55a67af125cd841828f258db6aa42484cee620de0d0590f4e77489406577
  • MD5 SHA1 SHA512 SSDEEP TLSH
Digest
80:02:27:b8:0d:91:28:03:11:fa:60:66:36:98:12:c5:7e:4e:58:6c:6d:c3:81:c9:95:b2:a0:57:a6:fd:83:ac
Digest Algorithm
sha256
PE Digests Matches
Trusted
Signing Certificate
SERIALNUMBER=4489370,CN=NCH Software\, Inc.,O=NCH Software\, Inc.,L=Greenwood Village,ST=Colorado,C=US,2.5.4.15=#131450726976617465204f7267616e697a6174696f6e,1.3.6.1.4.1.311.60.2.1.2=#130844656c6177617265,1.3.6.1.4.1.311.60.2.1.3=#13025553
Minor OS version
0
Major OS version
4
Entry point
7250562
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_GUI
DLL Characteristics
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LARGE_ADDRESS_AWARE IMAGE_FILE_32BIT_MACHINE
PDB paths
c:\sourcecode\videopad\release\VideoPad.pdb