General
- Target 2026-07-17_4c95ff67458f38bb78df791e17d12bb5_amadey_elex_mespinoza_remcos_smoke-loader
- Size 11.1MB
- Sample260718-ej3emsfw8l
- SHA256 fd62a1c0b55448b2fd06da891cfcd17800f03d71866afee4968ffc9054897da2
- MD5 4c95ff67458f38bb78df791e17d12bb5
- SHA1 626cccaa9af99d2111ea46749d1c1019ce34a9d8
- SHA512 63cdbf4dd52cbb43bda8cdb91ed73a26e0e47357e293ac42fd76b7b834e0de41ac036d07bbf9bf5ce7bdcb011770697a162afd5ae977bb8065187e7eb2dd80c3
- SSDEEP 196608:zmfLLFwPuQeSyh53Saalx/nvQzmspFIykkObCYJiPn1zSrx1614fpS0uZ:yzLCmQeS63SvlNnvQ9cywGBv1kxcyfpq
- TLSH T163C622D273A1FD28D76600B00865A6F4862765303721E8E3FE8F76C55DAD2C4BDB0A76
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
7/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-07-17_4c95ff67458f38bb78df791e17d12bb5_amadey_elex_mespinoza_remcos_smoke-loader.exe
Resource
win10v2004-20260513-en
4 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-07-17_4c95ff67458f38bb78df791e17d12bb5_amadey_elex_mespinoza_remcos_smoke-loader.exe
Resource
win11ltsc2024-20260709-en
9 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-07-17_4c95ff67458f38bb78df791e17d12bb5_amadey_elex_mespinoza_remcos_smoke-loader
- Size 11.1MB
- SHA256 fd62a1c0b55448b2fd06da891cfcd17800f03d71866afee4968ffc9054897da2
- MD5 4c95ff67458f38bb78df791e17d12bb5
- SHA1 626cccaa9af99d2111ea46749d1c1019ce34a9d8
- SHA512 63cdbf4dd52cbb43bda8cdb91ed73a26e0e47357e293ac42fd76b7b834e0de41ac036d07bbf9bf5ce7bdcb011770697a162afd5ae977bb8065187e7eb2dd80c3
- SSDEEP 196608:zmfLLFwPuQeSyh53Saalx/nvQzmspFIykkObCYJiPn1zSrx1614fpS0uZ:yzLCmQeS63SvlNnvQ9cywGBv1kxcyfpq
- TLSH T163C622D273A1FD28D76600B00865A6F4862765303721E8E3FE8F76C55DAD2C4BDB0A76
- MD5 SHA1 SHA512 SSDEEP TLSH
Score7/10-
Executes dropped EXE
-
Checks installed software on the system
Looks up Uninstall key entries in the registry to enumerate software on the system.