General
- Target 2026-07-31_deaac56e5314c0e6fa8d4dab2406ecc1_amadey_elex_remcos_smoke-loader_vidar
- Size 2.0MB
- Sample260731-txwxcawdmd
- SHA256 bd8e67e8b1b27aef04594c0e2abb7be22f6393409579f9320baa47668ca72d9a
- MD5 deaac56e5314c0e6fa8d4dab2406ecc1
- SHA1 f6fc1382bb0f6f750ee7e51d2a62e4d9632d79c5
- SHA512 a63cd6a97b577541095cf06f00b3c5d32fd14021df1cac42a6b5cf49fcb6f76262a3c84e58b8714531e546a2ae496eb3f787044933506151116c83a44e757888
- SSDEEP 24576:GENJKEt6dq8hXj8R2vxW870KH2e5GqR6FokG81Cvz44sLy0aZJQ5Te6L7wUb:GENwzIR257B5IqR6FoRvku04YLk
- TLSH T125A53910AB508028FAF752F55AADE1AC951C7DF0879860CBB1D577FA46362F12D3328B
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
9/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-07-31_deaac56e5314c0e6fa8d4dab2406ecc1_amadey_elex_remcos_smoke-loader_vidar.exe
Resource
win10v2004-20260513-en
9 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-07-31_deaac56e5314c0e6fa8d4dab2406ecc1_amadey_elex_remcos_smoke-loader_vidar.exe
Resource
win11ltsc2024-20260709-en
10 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-07-31_deaac56e5314c0e6fa8d4dab2406ecc1_amadey_elex_remcos_smoke-loader_vidar
- Size 2.0MB
- SHA256 bd8e67e8b1b27aef04594c0e2abb7be22f6393409579f9320baa47668ca72d9a
- MD5 deaac56e5314c0e6fa8d4dab2406ecc1
- SHA1 f6fc1382bb0f6f750ee7e51d2a62e4d9632d79c5
- SHA512 a63cd6a97b577541095cf06f00b3c5d32fd14021df1cac42a6b5cf49fcb6f76262a3c84e58b8714531e546a2ae496eb3f787044933506151116c83a44e757888
- SSDEEP 24576:GENJKEt6dq8hXj8R2vxW870KH2e5GqR6FokG81Cvz44sLy0aZJQ5Te6L7wUb:GENwzIR257B5IqR6FoRvku04YLk
- TLSH T125A53910AB508028FAF752F55AADE1AC951C7DF0879860CBB1D577FA46362F12D3328B
- MD5 SHA1 SHA512 SSDEEP TLSH
Score9/10-
Detects executables embedding registry key / value combination indicative of disabling Windows Defen
-
Executes dropped EXE
-
Loads dropped DLL
-
Drops file in System32 directory