General
- Target 2026-07-31_0e90e813c7032f26be9697f3e20a2e3d_amadey_elex_remcos_smoke-loader_vidar
- Size 6.5MB
- Sample260731-jnv9caythz
- SHA256 c43809f29f7ffbe5a1ff2caa6983f58d04989b1a56e88d5774589f6cf19f3919
- MD5 0e90e813c7032f26be9697f3e20a2e3d
- SHA1 1cf6524c42e54bb9a373b85c1ab821c6e837e417
- SHA512 527989f5bfc7b3558e6ec796425e8a7b369b26d3a58177b4771cb02e4817fc754e6289fcf90c950b42cb1e63396a4d0473766f29ca15311e4c0098576e17bd28
- SSDEEP 196608:OgwkyiRfOMA3FKyvDepa9nxw6pn5jljnHjrCtw+WI9xyY7Vz/d1JSsq1EszI1fyH:TByiJOMsme
- TLSH T123665B56663C00E1E1F691BD85E6971BE4723CA95730A3CB189107AA0F372F26D3E772
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
9/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-07-31_0e90e813c7032f26be9697f3e20a2e3d_amadey_elex_remcos_smoke-loader_vidar.exe
Resource
win10v2004-20260513-en
9 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-07-31_0e90e813c7032f26be9697f3e20a2e3d_amadey_elex_remcos_smoke-loader_vidar.exe
Resource
win11ltsc2024-20260709-en
10 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-07-31_0e90e813c7032f26be9697f3e20a2e3d_amadey_elex_remcos_smoke-loader_vidar
- Size 6.5MB
- SHA256 c43809f29f7ffbe5a1ff2caa6983f58d04989b1a56e88d5774589f6cf19f3919
- MD5 0e90e813c7032f26be9697f3e20a2e3d
- SHA1 1cf6524c42e54bb9a373b85c1ab821c6e837e417
- SHA512 527989f5bfc7b3558e6ec796425e8a7b369b26d3a58177b4771cb02e4817fc754e6289fcf90c950b42cb1e63396a4d0473766f29ca15311e4c0098576e17bd28
- SSDEEP 196608:OgwkyiRfOMA3FKyvDepa9nxw6pn5jljnHjrCtw+WI9xyY7Vz/d1JSsq1EszI1fyH:TByiJOMsme
- TLSH T123665B56663C00E1E1F691BD85E6971BE4723CA95730A3CB189107AA0F372F26D3E772
- MD5 SHA1 SHA512 SSDEEP TLSH
Score9/10-
Detects executables embedding registry key / value combination indicative of disabling Windows Defen
-
Executes dropped EXE
-
Loads dropped DLL
-
Drops file in System32 directory