General
- Target 2026-10-25_97c55516acb8e7904417e579272f7c69_amadey_elex_glassworm_remcos_smoke-loader_vidar
- Size 2.5MB
- Sample261026-xrtftagy3q
- SHA256 df83a1f0c28000fa1c987ee58e59aa94201d597560b0de3bed533ed460778aec
- MD5 97c55516acb8e7904417e579272f7c69
- SHA1 4ac15deec296bf49f8d5cc0cacc4d128fdd5f3c5
- SHA512 e49604591254a1b3400137bb15b5c871393d308f1d56bc7d7c6953307d93e52bf91a92bdcef07f689fdcba29eb88f623d61b4e9f34399e4e676ac095a52a6ca5
- SSDEEP 49152:NENwzIR257BLIqR6FoRvku04YL22jW46yv:NgwkQ7tIqMe
- TLSH T18EC56B10A7A08065FAF352B45ABEE178A5397CB04B6490CF61D4B7FE0E366E06D32357
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
9/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-10-25_97c55516acb8e7904417e579272f7c69_amadey_elex_glassworm_remcos_smoke-loader_vidar.exe
Resource
win10v2004-20260911-en
10 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-10-25_97c55516acb8e7904417e579272f7c69_amadey_elex_glassworm_remcos_smoke-loader_vidar.exe
Resource
win11ltsc2024-20260911-en
11 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-10-25_97c55516acb8e7904417e579272f7c69_amadey_elex_glassworm_remcos_smoke-loader_vidar
- Size 2.5MB
- SHA256 df83a1f0c28000fa1c987ee58e59aa94201d597560b0de3bed533ed460778aec
- MD5 97c55516acb8e7904417e579272f7c69
- SHA1 4ac15deec296bf49f8d5cc0cacc4d128fdd5f3c5
- SHA512 e49604591254a1b3400137bb15b5c871393d308f1d56bc7d7c6953307d93e52bf91a92bdcef07f689fdcba29eb88f623d61b4e9f34399e4e676ac095a52a6ca5
- SSDEEP 49152:NENwzIR257BLIqR6FoRvku04YL22jW46yv:NgwkQ7tIqMe
- TLSH T18EC56B10A7A08065FAF352B45ABEE178A5397CB04B6490CF61D4B7FE0E366E06D32357
- MD5 SHA1 SHA512 SSDEEP TLSH
Score9/10-
Detects executables embedding registry key / value combination indicative of disabling Windows Defen
-
Executes dropped EXE
-
Loads dropped DLL
-
Drops file in System32 directory