General
- Target 2026-06-27_785ea6d41e0449da7fee3ff5634305f6_amadey_elex_remcos_smoke-loader_stop
- Size 10.3MB
- Sample260629-gm2cvsfy8j
- SHA256 29d83566312e3eec67ec9ca738f053c94db8891a40ed5c1cd25d1c545c8663cc
- MD5 785ea6d41e0449da7fee3ff5634305f6
- SHA1 2a902841c565b21e66ec55a6995ca3077d90e929
- SHA512 940ddf1ff2c209c79a7d5a8ded4999c7ab3259e85fdc88cd3c1a1dec13c7e1ded4b2f4f7cfb5bd06956dd1fdbc50c91b234e0fc9308269c55a5a32c839258ce5
- SSDEEP 196608:6i4RVDnC0X7dumF+7diUj3Fef+AlAzhIZSBGaYKt0Eif:gCbmF+IUc2AU+ZSBx5cf
- TLSH T17EB62223739250B2D2A18831842BBFB5B2B76B574B029DF76356FED429321D1B323257
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
8/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-06-27_785ea6d41e0449da7fee3ff5634305f6_amadey_elex_remcos_smoke-loader_stop.exe
Resource
win10v2004-20260513-en
2 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-06-27_785ea6d41e0449da7fee3ff5634305f6_amadey_elex_remcos_smoke-loader_stop.exe
Resource
win11ltsc2024-20260618-en
16 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-06-27_785ea6d41e0449da7fee3ff5634305f6_amadey_elex_remcos_smoke-loader_stop
- Size 10.3MB
- SHA256 29d83566312e3eec67ec9ca738f053c94db8891a40ed5c1cd25d1c545c8663cc
- MD5 785ea6d41e0449da7fee3ff5634305f6
- SHA1 2a902841c565b21e66ec55a6995ca3077d90e929
- SHA512 940ddf1ff2c209c79a7d5a8ded4999c7ab3259e85fdc88cd3c1a1dec13c7e1ded4b2f4f7cfb5bd06956dd1fdbc50c91b234e0fc9308269c55a5a32c839258ce5
- SSDEEP 196608:6i4RVDnC0X7dumF+7diUj3Fef+AlAzhIZSBGaYKt0Eif:gCbmF+IUc2AU+ZSBx5cf
- TLSH T17EB62223739250B2D2A18831842BBFB5B2B76B574B029DF76356FED429321D1B323257
- MD5 SHA1 SHA512 SSDEEP TLSH
Score8/10-
Boot or Logon Autostart Execution: Active Setup
Adversaries may achieve persistence by adding a Registry key to the Active Setup of the local machine.
-
Enumerates connected drives
Attempts to read the root path of hard drives other than the default C: drive.