General
- Target 2026-09-06_2ce93cdd594f65ce69dcef9a74133baf_amadey_asyncrat_elex_glassworm_magniber_remcos_smoke-loader
- Size 12.2MB
- Sample260907-gn4vdazcpc
- SHA256 92d94965bc0f37de64da35b097000ec4f3ab2264115330565dbdd34cced24de4
- MD5 2ce93cdd594f65ce69dcef9a74133baf
- SHA1 ae7f51518f340071b0e50c52e8e9c172e621d858
- SHA512 0b446285b2efe5a7ee5278cda65fd4785e325b6d77859509542a749dc69b4b49a211fbedd18d6a2be52f284f6abf4f2c0a91962ec2c5ae84c7fd9da58d081f0e
- SSDEEP 98304:7Jk/cL3FBcs0M4+8D3f37ST/JPa71uWTvLP9Pk6gAK6n4ldyNhe7ul5V9tRGa:7Jk/w3F+kg37mPah7L1kehn4ie7w93
- TLSH T180D63912F2818416E87814B044174AB574B4BE492F6CD9F67CCA772C2AF61ECB92F7E1
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
10/10
Static task
static1
4 signatures
Behavioral task
behavioral1
Sample
2026-09-06_2ce93cdd594f65ce69dcef9a74133baf_amadey_asyncrat_elex_glassworm_magniber_remcos_smoke-loader.exe
Resource
win10v2004-20260513-en
3 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-09-06_2ce93cdd594f65ce69dcef9a74133baf_amadey_asyncrat_elex_glassworm_magniber_remcos_smoke-loader.exe
Resource
win11ltsc2024-20260709-en
3 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-09-06_2ce93cdd594f65ce69dcef9a74133baf_amadey_asyncrat_elex_glassworm_magniber_remcos_smoke-loader
- Size 12.2MB
- SHA256 92d94965bc0f37de64da35b097000ec4f3ab2264115330565dbdd34cced24de4
- MD5 2ce93cdd594f65ce69dcef9a74133baf
- SHA1 ae7f51518f340071b0e50c52e8e9c172e621d858
- SHA512 0b446285b2efe5a7ee5278cda65fd4785e325b6d77859509542a749dc69b4b49a211fbedd18d6a2be52f284f6abf4f2c0a91962ec2c5ae84c7fd9da58d081f0e
- SSDEEP 98304:7Jk/cL3FBcs0M4+8D3f37ST/JPa71uWTvLP9Pk6gAK6n4ldyNhe7ul5V9tRGa:7Jk/w3F+kg37mPah7L1kehn4ie7w93
- TLSH T180D63912F2818416E87814B044174AB574B4BE492F6CD9F67CCA772C2AF61ECB92F7E1
- MD5 SHA1 SHA512 SSDEEP TLSH
Score9/10-
Detects Windows executables referencing non-Windows User-Agents
-
Detects executables (downlaoders) containing URLs to raw contents of a paste
-
Detects executables using Telegram Chat Bot