General
- Target 2026-07-31_151a77cbb71d7c5a10b5e30f40521e57_amadey_elex_remcos_smoke-loader_vidar
- Size 2.0MB
- Sample260731-sax1fscc69
- SHA256 e3eabd8ea815b768a94f305087f53cdec721cb635c52f466f59ca7186a322104
- MD5 151a77cbb71d7c5a10b5e30f40521e57
- SHA1 1b9e08ed1d5b9d3bae56e9621019748527de381d
- SHA512 13ab5ad02a3f1086b1ddfb3537418a924d19f9c5ea3e5084d417ee48b4e187fddc7415085d02f7068c47922a702fc7d986dd2a80bbedd7c59c35caf9e61474f2
- SSDEEP 24576:NENJKEt6dq8hXj8R2vxW870KHRe5GqR6FokG81Cvz44sLy0aZJQ5Te6LFL:NENwzIR257BQIqR6FoRvku04YLF
- TLSH T12BA54A10AB508028FAF752F55AADE1AC951C7DF0879860CFA1D577FA46362F12D3328B
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
9/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-07-31_151a77cbb71d7c5a10b5e30f40521e57_amadey_elex_remcos_smoke-loader_vidar.exe
Resource
win10v2004-20260513-en
9 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-07-31_151a77cbb71d7c5a10b5e30f40521e57_amadey_elex_remcos_smoke-loader_vidar.exe
Resource
win11ltsc2024-20260709-en
10 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-07-31_151a77cbb71d7c5a10b5e30f40521e57_amadey_elex_remcos_smoke-loader_vidar
- Size 2.0MB
- SHA256 e3eabd8ea815b768a94f305087f53cdec721cb635c52f466f59ca7186a322104
- MD5 151a77cbb71d7c5a10b5e30f40521e57
- SHA1 1b9e08ed1d5b9d3bae56e9621019748527de381d
- SHA512 13ab5ad02a3f1086b1ddfb3537418a924d19f9c5ea3e5084d417ee48b4e187fddc7415085d02f7068c47922a702fc7d986dd2a80bbedd7c59c35caf9e61474f2
- SSDEEP 24576:NENJKEt6dq8hXj8R2vxW870KHRe5GqR6FokG81Cvz44sLy0aZJQ5Te6LFL:NENwzIR257BQIqR6FoRvku04YLF
- TLSH T12BA54A10AB508028FAF752F55AADE1AC951C7DF0879860CFA1D577FA46362F12D3328B
- MD5 SHA1 SHA512 SSDEEP TLSH
Score9/10-
Detects executables embedding registry key / value combination indicative of disabling Windows Defen
-
Executes dropped EXE
-
Loads dropped DLL
-
Drops file in System32 directory