2026-07-17_bd62b2ba539496e75e0c42c65b787014_amadey_elex_remcos_smoke-loader

Sharing

Copy URL Twitter E-mail

General

Target
2026-07-17_bd62b2ba539496e75e0c42c65b787014_amadey_elex_remcos_smoke-loader
Size 8.8MB
Sample260718-cryejsc18k
SHA256 5f92a5d7aff060ba1dd54fb5c601035e02b8a9a7b124cb6bb69e8c96eed05ce5
MD5 bd62b2ba539496e75e0c42c65b787014
SHA1 6a5196a85a162881a9ed1d1ac40336fc271795d9
SHA512 878431593ae9fa0581b1a60f66122e85e25c0f38a060ca0f4dd0b403f631a93fcf4750acd31de5adc5042cc359e89473c1e2265b96d2b82e19a751321402dd26
SSDEEP 196608:pSONnpS1SBdh9ZKvYozpXqpv6EiFmXceS0:pnbcSHh+vYMpXq1zV
TLSH
T1E69623407566F466E765003049B8B6E930295E353B1490EBBB9B3ECB3D750C23EB5EB2
MD5 SHA1 SHA512 SSDEEP TLSH

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
2026-07-17_bd62b2ba539496e75e0c42c65b787014_amadey_elex_remcos_smoke-loader

File Explorer

2026-07-17_bd62b2ba539496e75e0c42c65b787014_amadey_elex_remcos_smoke-loader

.exe 8.8MB

2026-07-17_bd62b2ba539496e75e0c42c65b787014_amadey_elex_remcos_smoke-loader

IMPHASH 2c1d58bac8430a64caf08d3ac656cc3b
SHA256 5f92a5d7aff060ba1dd54fb5c601035e02b8a9a7b124cb6bb69e8c96eed05ce5
MD5 bd62b2ba539496e75e0c42c65b787014
SHA1 6a5196a85a162881a9ed1d1ac40336fc271795d9
SHA512 878431593ae9fa0581b1a60f66122e85e25c0f38a060ca0f4dd0b403f631a93fcf4750acd31de5adc5042cc359e89473c1e2265b96d2b82e19a751321402dd26
SSDEEP 196608:pSONnpS1SBdh9ZKvYozpXqpv6EiFmXceS0:pnbcSHh+vYMpXq1zV
TLSH
T1E69623407566F466E765003049B8B6E930295E353B1490EBBB9B3ECB3D750C23EB5EB2
MD5 SHA1 SHA512 SSDEEP TLSH

windows:6 windows x86 arch:x86

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

Major OS version

Entry point

4096

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths

comctl32

CreatePropertySheetPageW CreatePropertySheetPageA

kernel32

QueryPerformanceCounter GetTickCount CreateWaitableTimerW GetLastError WideCharToMultiByte MultiByteToWideChar AreFileApisANSI LoadLibraryExW LoadLibraryW GetModuleFileNameA GetModuleFileNameW FormatMessageA FormatMessageW LocalFree GetSystemDirectoryW CreateFileW SetFileTime CloseHandle SetFileAttributesA SetFileAttributesW RemoveDirectoryA RemoveDirectoryW CreateDirectoryA CreateDirectoryW DeleteFileA DeleteFileW SetCurrentDirectoryA SetCurrentDirectoryW GetCurrentDirectoryA GetCurrentDirectoryW GetTempPathA GetTempPathW GetFileInformationByHandle GetStdHandle FindClose FindFirstFileA FindFirstFileW FindNextFileA FindNextFileW GetModuleHandleA GetFileAttributesA GetFileAttributesW CreateFileA GetFileSize SetFilePointer ReadFile WriteFile SetEndOfFile GetCurrentProcess SetLastError GetCurrentThreadId GlobalMemoryStatus GetSystemTimeAsFileTime Sleep GetVersion IsProcessorFeaturePresent ReleaseSemaphore InitializeCriticalSection WaitForSingleObject SetEvent ResetEvent CreateSemaphoreA CreateEventA GetVersionExA GetModuleHandleW CreateProcessA SetFilePointerEx GetConsoleMode GetConsoleCP FlushFileBuffers HeapSize SetStdHandle GetFileType GetProcessHeap FreeEnvironmentStringsW GetEnvironmentStringsW GetCommandLineW GetCommandLineA WriteConsoleW GetOEMCP IsValidCodePage FindFirstFileExA EnumSystemLocalesW GetUserDefaultLCID IsValidLocale GetLocaleInfoW LCMapStringW HeapReAlloc GetACP ExitProcess GetModuleHandleExW FreeLibraryAndExitThread ExitThread CreateThread TlsFree TlsSetValue TlsGetValue TlsAlloc InitializeCriticalSectionAndSpinCount GetCurrentProcessId LeaveCriticalSection EnterCriticalSection DeleteCriticalSection IsBadReadPtr FreeLibrary GetProcAddress HeapAlloc GetNativeSystemInfo LoadLibraryA VirtualAlloc GetSystemInfo VirtualFree HeapFree GetProcessAffinityMask RaiseException RtlUnwind GetCPInfo LCMapStringEx DecodePointer EncodePointer InitializeCriticalSectionEx GetStringTypeW InitializeSListHead GetStartupInfoW IsDebuggerPresent TerminateProcess SetUnhandledExceptionFilter UnhandledExceptionFilter

user32

DestroyWindow LoadIconA EndDialog KillTimer SetTimer PostMessageA SendMessageA MessageBoxW SetWindowTextW SetWindowTextA LoadStringW LoadStringA DialogBoxParamW DialogBoxParamA GetDlgItem GetWindowLongA SetWindowLongA ShowWindow CharUpperA CharUpperW SetScrollInfo GetScrollRange EnableScrollBar

gdi32

GetClipRgn RemoveFontResourceExA EnumFontFamiliesExW CancelDC GetPixel CreateDIBitmap GetPath GetWinMetaFileBits SetBkMode ChoosePixelFormat DeleteColorSpace Chord GetViewportOrgEx GetTextFaceA

comdlg32

GetFileTitleA

oleaut32

VariantClear SysAllocStringLen SysStringLen VarR8FromI4 VarR4FromI2 VarR4FromUI4 SafeArrayUnaccessData VarI4FromUI1 VarBoolFromI1 VarUI2FromUI4 GetErrorInfo VarI2FromR8 VarR4FromStr VarR8FromBool VarUI4FromUI8 VarUI4FromStr

Sharing

General

Malware Config

Signatures

File Explorer

2026-07-17_bd62b2ba539496e75e0c42c65b787014_amadey_elex_remcos_smoke-loader

comctl32

kernel32

user32

gdi32

comdlg32

oleaut32

generic