General
- Target 2026-11-01_f4294907615fd037248b384e044e2d85_amadey_elex_glassworm_remcos_smoke-loader_vidar
- Size 5.9MB
- Sample261102-dnp5faea42
- SHA256 ecc9037a07d1c9e9ce6e1c719b02d18e261eeda354c8c9b36aeb76d7257a0c12
- MD5 f4294907615fd037248b384e044e2d85
- SHA1 dcaad32ae2e0c6077b9e21a0b45f7a1d06c42f9c
- SHA512 600c27a7fbce03825cd7457e08c1e2001b5808c3f5f8426819f60f6613b6e2eb07faa192dada8c67d7c3d892f45d207109073da10acd24ec1ead60bfbf085643
- SSDEEP 98304:wgwkQ7RIqMeZlxa/r37lRYI9urj6KvySzneJ:wgwkRiZvaDJRY2/J
- TLSH T1C256CF22AB64C064E5B6C1BD46AAE25DE5723C6C8B3470CB41D066FE0F377E05E3A752
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
9/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-11-01_f4294907615fd037248b384e044e2d85_amadey_elex_glassworm_remcos_smoke-loader_vidar.exe
Resource
win10v2004-20260911-en
10 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-11-01_f4294907615fd037248b384e044e2d85_amadey_elex_glassworm_remcos_smoke-loader_vidar.exe
Resource
win11ltsc2024-20260911-en
11 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-11-01_f4294907615fd037248b384e044e2d85_amadey_elex_glassworm_remcos_smoke-loader_vidar
- Size 5.9MB
- SHA256 ecc9037a07d1c9e9ce6e1c719b02d18e261eeda354c8c9b36aeb76d7257a0c12
- MD5 f4294907615fd037248b384e044e2d85
- SHA1 dcaad32ae2e0c6077b9e21a0b45f7a1d06c42f9c
- SHA512 600c27a7fbce03825cd7457e08c1e2001b5808c3f5f8426819f60f6613b6e2eb07faa192dada8c67d7c3d892f45d207109073da10acd24ec1ead60bfbf085643
- SSDEEP 98304:wgwkQ7RIqMeZlxa/r37lRYI9urj6KvySzneJ:wgwkRiZvaDJRY2/J
- TLSH T1C256CF22AB64C064E5B6C1BD46AAE25DE5723C6C8B3470CB41D066FE0F377E05E3A752
- MD5 SHA1 SHA512 SSDEEP TLSH
Score9/10-
Detects executables embedding registry key / value combination indicative of disabling Windows Defen
-
Executes dropped EXE
-
Loads dropped DLL
-
Drops file in System32 directory