General
- Target 2026-07-31_92efd91b7051b7d1f14bb384156cad32_amadey_elex_remcos_smoke-loader_vidar
- Size 2.3MB
- Sample260731-rdkc4avzhv
- SHA256 8fda753b42148ffe19b21e5cff79db789c3cdad1ba9cdbf049e4abd9a8eb4e67
- MD5 92efd91b7051b7d1f14bb384156cad32
- SHA1 c9e95eea350731f6e514ff849006d2b0e53a4258
- SHA512 4ca1116a277031cf1e6cb261363de6467aa4386c700016ed4d5be1d82f91aa347ccdc72a011462eb73e7ddf32cdcf81e7c1b461b4156a1e09fac810563b03506
- SSDEEP 24576:TENJKEt6dq8hXj8R2vxW870KHIe5GqR6FokG81Cvz44sLy0aZJQ5Te6LtoIHDBr:TENwzIR257BLIqR6FoRvku04YLpHD
- TLSH T141B55B10AB808029FAB352B54AADE168E52D7DF1875850CFB0C977FE4B362E16D33257
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
9/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-07-31_92efd91b7051b7d1f14bb384156cad32_amadey_elex_remcos_smoke-loader_vidar.exe
Resource
win10v2004-20260513-en
12 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-07-31_92efd91b7051b7d1f14bb384156cad32_amadey_elex_remcos_smoke-loader_vidar.exe
Resource
win11ltsc2024-20260709-en
14 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-07-31_92efd91b7051b7d1f14bb384156cad32_amadey_elex_remcos_smoke-loader_vidar
- Size 2.3MB
- SHA256 8fda753b42148ffe19b21e5cff79db789c3cdad1ba9cdbf049e4abd9a8eb4e67
- MD5 92efd91b7051b7d1f14bb384156cad32
- SHA1 c9e95eea350731f6e514ff849006d2b0e53a4258
- SHA512 4ca1116a277031cf1e6cb261363de6467aa4386c700016ed4d5be1d82f91aa347ccdc72a011462eb73e7ddf32cdcf81e7c1b461b4156a1e09fac810563b03506
- SSDEEP 24576:TENJKEt6dq8hXj8R2vxW870KHIe5GqR6FokG81Cvz44sLy0aZJQ5Te6LtoIHDBr:TENwzIR257BLIqR6FoRvku04YLpHD
- TLSH T141B55B10AB808029FAB352B54AADE168E52D7DF1875850CFB0C977FE4B362E16D33257
- MD5 SHA1 SHA512 SSDEEP TLSH
Score9/10-
Detects executables embedding registry key / value combination indicative of disabling Windows Defen
-
Executes dropped EXE
-
Loads dropped DLL
-
Checks for any installed AV software in registry
-
Drops file in System32 directory