General
- Target 2026-09-30_4cb2de31a496dadadc415e17c5fbbc8b_elex_glassworm_remcos_stop
- Size 4.3MB
- Sample260930-nsa67a11az
- SHA256 e450d76027f8d7363819239bed4f8550fcf096c486f5e48696f01aeadd6ede2c
- MD5 4cb2de31a496dadadc415e17c5fbbc8b
- SHA1 3acbb3230c498a1424a170790e646d5891c0ee44
- SHA512 e2ae88a7c8c37bbb7092fa2a3dd67583a75b4db45e7207472cd77f63d8c31dbb5d50d1a3a7289cf03b65602d16a6a50b1c4586e765b9eb9e399f6c81e8aee566
- SSDEEP 98304:6xuj8mmGwwsTV0oRJUFF8rLphBAUZL0e2u1:vtmbwsx0oRJsF6thV
- TLSH T16B26BE42FBD181F2E98216B461BA873B5F319E158325C5D3E3A03EB55E302E16A3D39D
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
10/10
Behavioral task
behavioral1
Sample
2026-09-30_4cb2de31a496dadadc415e17c5fbbc8b_elex_glassworm_remcos_stop.exe
Resource
win10v2004-20260911-en
7 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-09-30_4cb2de31a496dadadc415e17c5fbbc8b_elex_glassworm_remcos_stop.exe
Resource
win11ltsc2024-20260911-en
7 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-09-30_4cb2de31a496dadadc415e17c5fbbc8b_elex_glassworm_remcos_stop
- Size 4.3MB
- SHA256 e450d76027f8d7363819239bed4f8550fcf096c486f5e48696f01aeadd6ede2c
- MD5 4cb2de31a496dadadc415e17c5fbbc8b
- SHA1 3acbb3230c498a1424a170790e646d5891c0ee44
- SHA512 e2ae88a7c8c37bbb7092fa2a3dd67583a75b4db45e7207472cd77f63d8c31dbb5d50d1a3a7289cf03b65602d16a6a50b1c4586e765b9eb9e399f6c81e8aee566
- SSDEEP 98304:6xuj8mmGwwsTV0oRJUFF8rLphBAUZL0e2u1:vtmbwsx0oRJsF6thV
- TLSH T16B26BE42FBD181F2E98216B461BA873B5F319E158325C5D3E3A03EB55E302E16A3D39D
- MD5 SHA1 SHA512 SSDEEP TLSH
Score9/10-
UPX dump on OEP (original entry point)
-
Executes dropped EXE
-
Adds Run key to start application