General
- Target 2026-07-31_e0726ea86e0d91bfc3279603952db7bf_amadey_elex_remcos_smoke-loader
- Size 2.1MB
- Sample260731-qtr77svth1
- SHA256 edcc0ccd6372cca60ec11edc2036d3aaceff6fff9f0e69c2712f88585e0e66c1
- MD5 e0726ea86e0d91bfc3279603952db7bf
- SHA1 d0728ef18f9382d43f023a88913ca659b8d3ce88
- SHA512 beba0cde284e03a850f9a09605b46051df785a4637e7f80da6d5d6cc1d8bb33d786f735a988d3f6c4054104a1e1a3acdc0340dec585ebe944e40eb69c688ac89
- SSDEEP 49152:vENwzIR257B5IqR6FoRvku04YLzNNDS5lS:vgwkQ7XIqMe+NDS5lS
- TLSH T17BA55A10B7508029FAE752F54AADE1BC951C7DF08B9860CFA1D577FA4A362E12D3324B
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
9/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-07-31_e0726ea86e0d91bfc3279603952db7bf_amadey_elex_remcos_smoke-loader.exe
Resource
win10v2004-20260513-en
9 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-07-31_e0726ea86e0d91bfc3279603952db7bf_amadey_elex_remcos_smoke-loader.exe
Resource
win11ltsc2024-20260710-en
10 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-07-31_e0726ea86e0d91bfc3279603952db7bf_amadey_elex_remcos_smoke-loader
- Size 2.1MB
- SHA256 edcc0ccd6372cca60ec11edc2036d3aaceff6fff9f0e69c2712f88585e0e66c1
- MD5 e0726ea86e0d91bfc3279603952db7bf
- SHA1 d0728ef18f9382d43f023a88913ca659b8d3ce88
- SHA512 beba0cde284e03a850f9a09605b46051df785a4637e7f80da6d5d6cc1d8bb33d786f735a988d3f6c4054104a1e1a3acdc0340dec585ebe944e40eb69c688ac89
- SSDEEP 49152:vENwzIR257B5IqR6FoRvku04YLzNNDS5lS:vgwkQ7XIqMe+NDS5lS
- TLSH T17BA55A10B7508029FAE752F54AADE1BC951C7DF08B9860CFA1D577FA4A362E12D3324B
- MD5 SHA1 SHA512 SSDEEP TLSH
Score9/10-
Detects executables embedding registry key / value combination indicative of disabling Windows Defen
-
Executes dropped EXE
-
Loads dropped DLL
-
Drops file in System32 directory