General
- Target 2026-05-03_a912592b21207c0e8cad7fef64979dd4_amadey_cobalt-strike_elex_remcos_smoke-loader_vidar
- Size 2.2MB
- Sample260503-snbpdaft6l
- SHA256 f426da8b707ffa8d5f6714a1e3d0bf499565cf65ee01d6e27350a5a76803ef61
- MD5 a912592b21207c0e8cad7fef64979dd4
- SHA1 d9e2936d4ecc6552174724f6ea4dfeaf6d74f372
- SHA512 40fbd29b17735d39b90e324880531a3dcb39aafe9958359cabc67457ac49675618ebf1e36e6fc63d00470eeb000fbb2c652b8680b12e8ad5886e687a06516109
- SSDEEP 24576:UENJKEt6dq8hXj8R2vxW870KHZe5GqR6FokG81Cvz44sLy0aZJQ5Te6LnD4mj67q:UENwzIR257BYIqR6FoRvku04YLQ
- TLSH T142B53B10A7508028FAE653B54AAEE1A895187DF0479850CBEDF577F9C63E2F02D3E247
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
7/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-05-03_a912592b21207c0e8cad7fef64979dd4_amadey_cobalt-strike_elex_remcos_smoke-loader_vidar.exe
Resource
win10v2004-20260130-en
9 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-05-03_a912592b21207c0e8cad7fef64979dd4_amadey_cobalt-strike_elex_remcos_smoke-loader_vidar.exe
Resource
win11-20260130-en
9 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-05-03_a912592b21207c0e8cad7fef64979dd4_amadey_cobalt-strike_elex_remcos_smoke-loader_vidar
- Size 2.2MB
- SHA256 f426da8b707ffa8d5f6714a1e3d0bf499565cf65ee01d6e27350a5a76803ef61
- MD5 a912592b21207c0e8cad7fef64979dd4
- SHA1 d9e2936d4ecc6552174724f6ea4dfeaf6d74f372
- SHA512 40fbd29b17735d39b90e324880531a3dcb39aafe9958359cabc67457ac49675618ebf1e36e6fc63d00470eeb000fbb2c652b8680b12e8ad5886e687a06516109
- SSDEEP 24576:UENJKEt6dq8hXj8R2vxW870KHZe5GqR6FokG81Cvz44sLy0aZJQ5Te6LnD4mj67q:UENwzIR257BYIqR6FoRvku04YLQ
- TLSH T142B53B10A7508028FAE653B54AAEE1A895187DF0479850CBEDF577F9C63E2F02D3E247
- MD5 SHA1 SHA512 SSDEEP TLSH
Score7/10-
Executes dropped EXE
-
Loads dropped DLL
-
Drops file in System32 directory