General
- Target 2026-10-22_a160608608895ad6bb7f84a0a8447b4f_amadey_elex_glassworm_remcos_smoke-loader_vidar
- Size 3.9MB
- Sample261024-cwyacaea83
- SHA256 90a544b191f1b5b1e4fa734161d01fd457007805f87ae62ba9f22a5b8b059ab8
- MD5 a160608608895ad6bb7f84a0a8447b4f
- SHA1 485c5b1b531145acefb8e060a8a2632efb95ac8d
- SHA512 3ff658bdf3db9602f5b3e3fe4d545a99d3670364b55eb78e8f7a9fc6025b8a01995762e7dc76ed939f47e5f0519a95971051bc6b54c5d57ce654179ca72717db
- SSDEEP 49152:qENwzIR257BrIqR6FoRvku04YLicHGWMRDt56DAZ7ikUgC78gXn1waTTbe:qgwkQ7dIqMe9WsOIgo
- TLSH T1C4166C00BBA0C0A8F6B792B489B9D5B8F5757CA14B7092CF6195E7AE1E332E05D35313
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
9/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-10-22_a160608608895ad6bb7f84a0a8447b4f_amadey_elex_glassworm_remcos_smoke-loader_vidar.exe
Resource
win10v2004-20260911-en
10 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-10-22_a160608608895ad6bb7f84a0a8447b4f_amadey_elex_glassworm_remcos_smoke-loader_vidar.exe
Resource
win11ltsc2024-20260911-en
11 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-10-22_a160608608895ad6bb7f84a0a8447b4f_amadey_elex_glassworm_remcos_smoke-loader_vidar
- Size 3.9MB
- SHA256 90a544b191f1b5b1e4fa734161d01fd457007805f87ae62ba9f22a5b8b059ab8
- MD5 a160608608895ad6bb7f84a0a8447b4f
- SHA1 485c5b1b531145acefb8e060a8a2632efb95ac8d
- SHA512 3ff658bdf3db9602f5b3e3fe4d545a99d3670364b55eb78e8f7a9fc6025b8a01995762e7dc76ed939f47e5f0519a95971051bc6b54c5d57ce654179ca72717db
- SSDEEP 49152:qENwzIR257BrIqR6FoRvku04YLicHGWMRDt56DAZ7ikUgC78gXn1waTTbe:qgwkQ7dIqMe9WsOIgo
- TLSH T1C4166C00BBA0C0A8F6B792B489B9D5B8F5757CA14B7092CF6195E7AE1E332E05D35313
- MD5 SHA1 SHA512 SSDEEP TLSH
Score9/10-
Detects executables embedding registry key / value combination indicative of disabling Windows Defen
-
Executes dropped EXE
-
Loads dropped DLL
-
Drops file in System32 directory