General
- Target 2026-10-22_9b6f7fec465dbd47bcd0e26d5b72c7d0_amadey_elex_glassworm_remcos_smoke-loader
- Size 4.1MB
- Sample261024-dtvbcafv2x
- SHA256 52b262ad1925f00df1f2a615359ee42f64d5c4490ca0fae934c25725635a1b0c
- MD5 9b6f7fec465dbd47bcd0e26d5b72c7d0
- SHA1 252ad43205b34d91c61c230418bac4ca00f11cae
- SHA512 4b65b33349be25b4e76e6619d916a2346a95d933d4112877d60e0f7ecb21197a9ff2be1a72cfcb745be0d1970a35898b86f3e1b3c2c8622ab8d2ee2b58d2c6c7
- SSDEEP 49152:gENwzIR257BkIqR6FoRvku04YLMENwzIR257BeIqR6FoRvku04YLC:ggwkQ72IqMeZgwkQ7cIqMe
- TLSH T164164A20AB508029FAF712F55AADE27C941D7DB08B9860CBB1D577FA46356F02D3324B
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
9/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-10-22_9b6f7fec465dbd47bcd0e26d5b72c7d0_amadey_elex_glassworm_remcos_smoke-loader.exe
Resource
win10v2004-20260911-en
10 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-10-22_9b6f7fec465dbd47bcd0e26d5b72c7d0_amadey_elex_glassworm_remcos_smoke-loader.exe
Resource
win11ltsc2024-20260911-en
11 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-10-22_9b6f7fec465dbd47bcd0e26d5b72c7d0_amadey_elex_glassworm_remcos_smoke-loader
- Size 4.1MB
- SHA256 52b262ad1925f00df1f2a615359ee42f64d5c4490ca0fae934c25725635a1b0c
- MD5 9b6f7fec465dbd47bcd0e26d5b72c7d0
- SHA1 252ad43205b34d91c61c230418bac4ca00f11cae
- SHA512 4b65b33349be25b4e76e6619d916a2346a95d933d4112877d60e0f7ecb21197a9ff2be1a72cfcb745be0d1970a35898b86f3e1b3c2c8622ab8d2ee2b58d2c6c7
- SSDEEP 49152:gENwzIR257BkIqR6FoRvku04YLMENwzIR257BeIqR6FoRvku04YLC:ggwkQ72IqMeZgwkQ7cIqMe
- TLSH T164164A20AB508029FAF712F55AADE27C941D7DB08B9860CBB1D577FA46356F02D3324B
- MD5 SHA1 SHA512 SSDEEP TLSH
Score9/10-
Detects executables embedding registry key / value combination indicative of disabling Windows Defen
-
Executes dropped EXE
-
Loads dropped DLL
-
Drops file in System32 directory