General
- Target 2026-07-31_ebec880a369fd7f0f5c6576084fdf591_amadey_elex_remcos_smoke-loader
- Size 2.1MB
- Sample260731-tp63caxwfx
- SHA256 1bc5814017cc7336e1d4ed3c8e588d1b780ffcbb97fa23c73e3fa45af158086f
- MD5 ebec880a369fd7f0f5c6576084fdf591
- SHA1 19f96bc4476ed28b09f06b9d400e63cd9863f794
- SHA512 c56f6e79a84acb4057edfdc30ebfb0ce6675dcb47a323e31b2ce7c9ae78878e16f1c6fedfe6beb48b4a39ba1f201b8705468a0d309c70a8aad9030548d18f71f
- SSDEEP 24576:oENJKEt6dq8hXj8R2vxW870KHFe5GqR6FokG81Cvz44sLy0aZJQ5Te6LCYJLi:oENwzIR257BkIqR6FoRvku04YLCYF
- TLSH T196A54A10BB508028FAE752F55AADE1AC951C7DF0879860CBB1D577FA46362F12D3328B
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
9/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-07-31_ebec880a369fd7f0f5c6576084fdf591_amadey_elex_remcos_smoke-loader.exe
Resource
win10v2004-20260513-en
10 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-07-31_ebec880a369fd7f0f5c6576084fdf591_amadey_elex_remcos_smoke-loader.exe
Resource
win11ltsc2024-20260709-en
12 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-07-31_ebec880a369fd7f0f5c6576084fdf591_amadey_elex_remcos_smoke-loader
- Size 2.1MB
- SHA256 1bc5814017cc7336e1d4ed3c8e588d1b780ffcbb97fa23c73e3fa45af158086f
- MD5 ebec880a369fd7f0f5c6576084fdf591
- SHA1 19f96bc4476ed28b09f06b9d400e63cd9863f794
- SHA512 c56f6e79a84acb4057edfdc30ebfb0ce6675dcb47a323e31b2ce7c9ae78878e16f1c6fedfe6beb48b4a39ba1f201b8705468a0d309c70a8aad9030548d18f71f
- SSDEEP 24576:oENJKEt6dq8hXj8R2vxW870KHFe5GqR6FokG81Cvz44sLy0aZJQ5Te6LCYJLi:oENwzIR257BkIqR6FoRvku04YLCYF
- TLSH T196A54A10BB508028FAE752F55AADE1AC951C7DF0879860CBB1D577FA46362F12D3328B
- MD5 SHA1 SHA512 SSDEEP TLSH
Score9/10-
Detects executables embedding registry key / value combination indicative of disabling Windows Defen
-
Executes dropped EXE
-
Loads dropped DLL
-
Drops desktop.ini file(s)
-
Drops file in System32 directory