General
- Target 2026-10-22_8cca51e15f2cf7e6cdeeb99bf8beb3f8_amadey_elex_glassworm_remcos_smoke-loader_vidar
- Size 2.5MB
- Sample261024-fy3vdsxt3q
- SHA256 2e9e864e654f90b5a48f4f4b97d16c170649c0293981b10558e2a27c2d483d6f
- MD5 8cca51e15f2cf7e6cdeeb99bf8beb3f8
- SHA1 cd01882268f908e0a37cc910dc19996b43742455
- SHA512 6b3f69c65ffe93d4df465a8c1604bbd7773eb591c4000caa915a73066cb4da6c65fb4c68f6a57fa0240214722d65ec82c429c033b1acacec10ca24cd199a4212
- SSDEEP 49152:NENwzIR257BLIqR6FoRvku04YLH2jW46yv:NgwkQ7tIqMe
- TLSH T1F6C56C10B7A08054FAF352B45ABEE178A5397CB04B6490CF61D4B6FE8E366E06D32357
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
9/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-10-22_8cca51e15f2cf7e6cdeeb99bf8beb3f8_amadey_elex_glassworm_remcos_smoke-loader_vidar.exe
Resource
win10v2004-20260911-en
10 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-10-22_8cca51e15f2cf7e6cdeeb99bf8beb3f8_amadey_elex_glassworm_remcos_smoke-loader_vidar.exe
Resource
win11ltsc2024-20260911-en
11 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-10-22_8cca51e15f2cf7e6cdeeb99bf8beb3f8_amadey_elex_glassworm_remcos_smoke-loader_vidar
- Size 2.5MB
- SHA256 2e9e864e654f90b5a48f4f4b97d16c170649c0293981b10558e2a27c2d483d6f
- MD5 8cca51e15f2cf7e6cdeeb99bf8beb3f8
- SHA1 cd01882268f908e0a37cc910dc19996b43742455
- SHA512 6b3f69c65ffe93d4df465a8c1604bbd7773eb591c4000caa915a73066cb4da6c65fb4c68f6a57fa0240214722d65ec82c429c033b1acacec10ca24cd199a4212
- SSDEEP 49152:NENwzIR257BLIqR6FoRvku04YLH2jW46yv:NgwkQ7tIqMe
- TLSH T1F6C56C10B7A08054FAF352B45ABEE178A5397CB04B6490CF61D4B6FE8E366E06D32357
- MD5 SHA1 SHA512 SSDEEP TLSH
Score9/10- Custom signature
Detects executables embedding registry key / value combination indicative of disabling Windows Defen
Executes dropped EXE
Loads dropped DLL
Drops file in System32 directory