General

  • Target
    2026-09-24_bf40416f0bbd7346251b1e4c2ff4dde5_elex_floxif_glassworm_remcos_stop
  • Size 8.0MB
  • Sample260925-aab4waztez
  • SHA256 d95c4c1fdfc10d3bb5df046e645f2a27e1045a75796af6cfee817e6731953f2a
  • MD5 SHA1 SHA512 SSDEEP TLSH
Score
5/10

Malware Config

Signatures

  • Codesign digest Mismatch 1 IoCs

    File was altered after it was signed.

File Explorer

  • 2026-09-24_bf40416f0bbd7346251b1e4c2ff4dde5_elex_floxif_glassworm_remcos_stop
    .exe 8.0MB

2026-09-24_bf40416f0bbd7346251b1e4c2ff4dde5_elex_floxif_glassworm_remcos_stop

  • IMPHASH 1d8bd2762d7694de049f800fd5ca2f79
  • SHA256 d95c4c1fdfc10d3bb5df046e645f2a27e1045a75796af6cfee817e6731953f2a
  • MD5 SHA1 SHA512 SSDEEP TLSH
  • Codesign digest Mismatch

    File was altered after it was signed.

PE Signature issue

Digest
9d:3b:24:35:b0:e4:9d:3c:c8:92:c3:20:a8:21:ab:6c:8a:de:e6:75:a6:c8:de:7c:24:f7:7f:48:33:43:bf:d1
Digest Algorithm
sha256
PE Digests Matches
Not matched
Trusted
Signing Certificate
CN=Raxco Software\, Inc.,O=Raxco Software\, Inc.,L=Gaithersburg,ST=Maryland,C=US

PE Signature issue

Digest
6f:3f:fb:5e:59:33:e0:33:6c:1b:33:37:bb:f0:03:fa:db:a8:65:94
Digest Algorithm
sha1
PE Digests Matches
Not matched
Trusted
Signing Certificate
CN=Raxco Software\, Inc.,O=Raxco Software\, Inc.,L=Gaithersburg,ST=Maryland,C=US
Minor OS version
0
Major OS version
5
Entry point
1014443
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_GUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE
PDB paths
d:\MyProjects\Raxco\trunk\src\release\PerfectRegistry.pdb