General
- Target 2026-07-19_8aae52628e626c40413e75b2601220a0_amadey_elex_icedid_remcos_smoke-loader_stop
- Size 19.2MB
- Sample260720-bd9d8adv2x
- SHA256 acc0a44cdc34a10911dcf0b033860ff1f5b182fbbf11332a327ae7b7a70370aa
- MD5 8aae52628e626c40413e75b2601220a0
- SHA1 3cd12007b7709ec3a9da79dbdc450bd5631394dd
- SHA512 3c6732765e57c26c98330d5b572b5a0c8470dfa67e5d5f375323905311a7a374d42a712f6542b8e23ab5e130cd6bd5fe283663b98db8f410de45f30f7884cae9
- SSDEEP 393216:KBs8jH8hsybqw8DPqpnO2qe4L1YY+uWwye24Sz4/zSKeN6sGb/n3:UscRgq72d46Jw724Sz4uMv
- TLSH T162173355EB98BC60E1FA5432B53582226735FF506A6D42CBE371352809F93C2AB33F16
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
9/10
Static task
static1
Behavioral task
behavioral1
Sample
2026-07-19_8aae52628e626c40413e75b2601220a0_amadey_elex_icedid_remcos_smoke-loader_stop.exe
Resource
win10v2004-20260513-en
19 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-07-19_8aae52628e626c40413e75b2601220a0_amadey_elex_icedid_remcos_smoke-loader_stop.exe
Resource
win11ltsc2024-20260709-en
18 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-07-19_8aae52628e626c40413e75b2601220a0_amadey_elex_icedid_remcos_smoke-loader_stop
- Size 19.2MB
- SHA256 acc0a44cdc34a10911dcf0b033860ff1f5b182fbbf11332a327ae7b7a70370aa
- MD5 8aae52628e626c40413e75b2601220a0
- SHA1 3cd12007b7709ec3a9da79dbdc450bd5631394dd
- SHA512 3c6732765e57c26c98330d5b572b5a0c8470dfa67e5d5f375323905311a7a374d42a712f6542b8e23ab5e130cd6bd5fe283663b98db8f410de45f30f7884cae9
- SSDEEP 393216:KBs8jH8hsybqw8DPqpnO2qe4L1YY+uWwye24Sz4/zSKeN6sGb/n3:UscRgq72d46Jw724Sz4uMv
- TLSH T162173355EB98BC60E1FA5432B53582226735FF506A6D42CBE371352809F93C2AB33F16
- MD5 SHA1 SHA512 SSDEEP TLSH
Score9/10-
UPX dump on OEP (original entry point)
-
ACProtect 1.3x - 1.4x DLL software
Detects file using ACProtect software.
-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Drops file in System32 directory