General
- Target 2026-07-29_b0d50d91d62e271e49dd530f937d449f_amadey_elex_remcos_smoke-loader
- Size 3.8MB
- Sample260729-yhh46a1dph
- SHA256 be7309a680ce695d111181547cdeab9586a9c4c743f609923a53acc35aba7229
- MD5 b0d50d91d62e271e49dd530f937d449f
- SHA1 9435535cdbabc456b33d19fd2cdad2abadeba229
- SHA512 29a8a819f86f3bbba666d3aff3bf85905ad23f62c00cdf6ff8aec787a02474cd4bd5900e8546012629c6761f30936d9937b289872516326a805072e05fca58a9
- SSDEEP 49152:lENwzIR257BMIqR6FoRvku04YLUS/T/u1Ib+IbqtvQ/anwzFH:lgwkQ7mIqMee7/u1k+kqtvOan
- TLSH T15E162810A6C3802CEDE63DB126BFE9F86F196CA8475411C770B53EE95735AE2193234E
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
9/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-07-29_b0d50d91d62e271e49dd530f937d449f_amadey_elex_remcos_smoke-loader.exe
Resource
win10v2004-20260513-en
9 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-07-29_b0d50d91d62e271e49dd530f937d449f_amadey_elex_remcos_smoke-loader.exe
Resource
win11ltsc2024-20260709-en
10 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-07-29_b0d50d91d62e271e49dd530f937d449f_amadey_elex_remcos_smoke-loader
- Size 3.8MB
- SHA256 be7309a680ce695d111181547cdeab9586a9c4c743f609923a53acc35aba7229
- MD5 b0d50d91d62e271e49dd530f937d449f
- SHA1 9435535cdbabc456b33d19fd2cdad2abadeba229
- SHA512 29a8a819f86f3bbba666d3aff3bf85905ad23f62c00cdf6ff8aec787a02474cd4bd5900e8546012629c6761f30936d9937b289872516326a805072e05fca58a9
- SSDEEP 49152:lENwzIR257BMIqR6FoRvku04YLUS/T/u1Ib+IbqtvQ/anwzFH:lgwkQ7mIqMee7/u1k+kqtvOan
- TLSH T15E162810A6C3802CEDE63DB126BFE9F86F196CA8475411C770B53EE95735AE2193234E
- MD5 SHA1 SHA512 SSDEEP TLSH
Score9/10-
Detects executables embedding registry key / value combination indicative of disabling Windows Defen
-
Executes dropped EXE
-
Loads dropped DLL
-
Drops file in System32 directory