General
- Target 2026-07-31_3874dfdaa01f7c2d37b900a2bf6330ab_amadey_elex_remcos_smoke-loader
- Size 2.9MB
- Sample260731-pammyafn4v
- SHA256 d49aaef9aaff771d18a0bf85f618ed0d10c550d61a35ed0e80bb0c919ff79c28
- MD5 3874dfdaa01f7c2d37b900a2bf6330ab
- SHA1 2acb3b1bb0b005ffeb0f52f9eb97e2c30a292e6a
- SHA512 4e10d98c712bac679b47cec0cbd63686675d9652907faab77d079b912205336b93332c87a36c2e4c301f393d990b848d4f2cd9c489a4286095ffd17cc22a26fa
- SSDEEP 24576:CENJKEt6dq8hXj8R2vxW870KHae5GqR6FokG81Cvz44sLy0aZJQ5Te6L7+ZW:CENwzIR257BNIqR6FoRvku04YL6
- TLSH T115E581036E0C8A34EA9F3EB00D59D3E841047E60875638D76CC57EEDE6B19E5393E266
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
9/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-07-31_3874dfdaa01f7c2d37b900a2bf6330ab_amadey_elex_remcos_smoke-loader.exe
Resource
win10v2004-20260513-en
9 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-07-31_3874dfdaa01f7c2d37b900a2bf6330ab_amadey_elex_remcos_smoke-loader.exe
Resource
win11ltsc2024-20260709-en
10 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-07-31_3874dfdaa01f7c2d37b900a2bf6330ab_amadey_elex_remcos_smoke-loader
- Size 2.9MB
- SHA256 d49aaef9aaff771d18a0bf85f618ed0d10c550d61a35ed0e80bb0c919ff79c28
- MD5 3874dfdaa01f7c2d37b900a2bf6330ab
- SHA1 2acb3b1bb0b005ffeb0f52f9eb97e2c30a292e6a
- SHA512 4e10d98c712bac679b47cec0cbd63686675d9652907faab77d079b912205336b93332c87a36c2e4c301f393d990b848d4f2cd9c489a4286095ffd17cc22a26fa
- SSDEEP 24576:CENJKEt6dq8hXj8R2vxW870KHae5GqR6FokG81Cvz44sLy0aZJQ5Te6L7+ZW:CENwzIR257BNIqR6FoRvku04YL6
- TLSH T115E581036E0C8A34EA9F3EB00D59D3E841047E60875638D76CC57EEDE6B19E5393E266
- MD5 SHA1 SHA512 SSDEEP TLSH
Score9/10-
Detects executables embedding registry key / value combination indicative of disabling Windows Defen
-
Executes dropped EXE
-
Loads dropped DLL
-
Drops file in System32 directory