General
- Target 2026-07-29_c38709f9d77d01e9c18ee8980f69b215_amadey_elex_remcos_smoke-loader
- Size 2.6MB
- Sample260729-ybllps1dke
- SHA256 50b541a204ab09cbca3432d7635e9f90332bc8dc126a41facff8bf2440783fc0
- MD5 c38709f9d77d01e9c18ee8980f69b215
- SHA1 1db3cf21f15b42c1139601ab788521a468f5163a
- SHA512 cf4ad959419e2fd73883c835e42bf75e0a338f8f1128ea71881f1298c88535e52def6cce769daf4a55cb6136a2174d6a386cc9a17069944ac821c6d0720623a2
- SSDEEP 49152:lENwzIR257BEIqR6FoRvku04YLP/y1Bp+m5:lgwkQ72IqMeLHkm
- TLSH T141C55C20B7508039F9E312F54AADF278955DBCF04B6861CBA1C537FE99352E12E36287
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
9/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-07-29_c38709f9d77d01e9c18ee8980f69b215_amadey_elex_remcos_smoke-loader.exe
Resource
win10v2004-20260513-en
9 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-07-29_c38709f9d77d01e9c18ee8980f69b215_amadey_elex_remcos_smoke-loader.exe
Resource
win11ltsc2024-20260709-en
10 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-07-29_c38709f9d77d01e9c18ee8980f69b215_amadey_elex_remcos_smoke-loader
- Size 2.6MB
- SHA256 50b541a204ab09cbca3432d7635e9f90332bc8dc126a41facff8bf2440783fc0
- MD5 c38709f9d77d01e9c18ee8980f69b215
- SHA1 1db3cf21f15b42c1139601ab788521a468f5163a
- SHA512 cf4ad959419e2fd73883c835e42bf75e0a338f8f1128ea71881f1298c88535e52def6cce769daf4a55cb6136a2174d6a386cc9a17069944ac821c6d0720623a2
- SSDEEP 49152:lENwzIR257BEIqR6FoRvku04YLP/y1Bp+m5:lgwkQ72IqMeLHkm
- TLSH T141C55C20B7508039F9E312F54AADF278955DBCF04B6861CBA1C537FE99352E12E36287
- MD5 SHA1 SHA512 SSDEEP TLSH
Score9/10-
Detects executables embedding registry key / value combination indicative of disabling Windows Defen
-
Executes dropped EXE
-
Loads dropped DLL
-
Drops file in System32 directory