General
- Target 2026-08-20_9c0956f2cccd9fd0e63269560f9a3151_amadey_elex_glassworm_remcos_smoke-loader_stealc_stop_tofsee
- Size 993KB
- Sample260820-1dv92aar7t
- SHA256 a6adc46a36e04a0653e696aa700af6215f693ae42b2792eff03231381a582a49
- MD5 9c0956f2cccd9fd0e63269560f9a3151
- SHA1 00d40c897800a1ef2340c1e1b61cf9c1b2a2f4cd
- SHA512 810d8762866532a6e7ab07a3221fae2e357847dd71d1924d6945ce92d70eef70f8a787d6a5e6e0246f42332900390f60d4e78a19fdf746184927b1cd69fff792
- SSDEEP 12288:swKfOVRo9yRYc+Q7O4O8b8ITDnlz0UmuTx5KEZuF49:sxWVeyRYvQ7O4O8b8ITDnlhp9
- TLSH T12D25B62173E89114F5F37B309EB94AA46A677C516EB5C64F3688334E1F71AA0CD22723
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
6/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-08-20_9c0956f2cccd9fd0e63269560f9a3151_amadey_elex_glassworm_remcos_smoke-loader_stealc_stop_tofsee.exe
Resource
win10v2004-20260513-en
8 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-08-20_9c0956f2cccd9fd0e63269560f9a3151_amadey_elex_glassworm_remcos_smoke-loader_stealc_stop_tofsee.exe
Resource
win11ltsc2024-20260709-en
8 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-08-20_9c0956f2cccd9fd0e63269560f9a3151_amadey_elex_glassworm_remcos_smoke-loader_stealc_stop_tofsee
- Size 993KB
- SHA256 a6adc46a36e04a0653e696aa700af6215f693ae42b2792eff03231381a582a49
- MD5 9c0956f2cccd9fd0e63269560f9a3151
- SHA1 00d40c897800a1ef2340c1e1b61cf9c1b2a2f4cd
- SHA512 810d8762866532a6e7ab07a3221fae2e357847dd71d1924d6945ce92d70eef70f8a787d6a5e6e0246f42332900390f60d4e78a19fdf746184927b1cd69fff792
- SSDEEP 12288:swKfOVRo9yRYc+Q7O4O8b8ITDnlz0UmuTx5KEZuF49:sxWVeyRYvQ7O4O8b8ITDnlhp9
- TLSH T12D25B62173E89114F5F37B309EB94AA46A677C516EB5C64F3688334E1F71AA0CD22723
- MD5 SHA1 SHA512 SSDEEP TLSH
Score6/10-
Adds Run key to start application
-
Checks installed software on the system
Looks up Uninstall key entries in the registry to enumerate software on the system.
-
Drops file in System32 directory