General
- Target 2026-07-31_c5d00a47f5f9be34dda6580c6df45067_amadey_elex_remcos_smoke-loader
- Size 2.0MB
- Sample260731-vap1yscj5v
- SHA256 aca50d73de673d1806cc1b86d439150056f64f4c4e6272839d2cebd4865c3341
- MD5 c5d00a47f5f9be34dda6580c6df45067
- SHA1 99022fdac61728775a87083159b4539815da7fdd
- SHA512 df04cf6e976ba278aedf8188f2ed5d7197ceca5e2c0e74a4d90c32689850442923ae835c645bb73d2405230a74bee1a374d1ab4920264275d0941cb88b264189
- SSDEEP 24576:mENJKEt6dq8hXj8R2vxW870KH9e5GqR6FokG81Cvz44sLy0aZJQ5Te6Lm:mENwzIR257BcIqR6FoRvku04YL
- TLSH T136A53A10A7508028FAE752F55AADE1BC951C7DF0879860CBB1D977FA46362F12D3328B
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
9/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-07-31_c5d00a47f5f9be34dda6580c6df45067_amadey_elex_remcos_smoke-loader.exe
Resource
win10v2004-20260513-en
9 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-07-31_c5d00a47f5f9be34dda6580c6df45067_amadey_elex_remcos_smoke-loader.exe
Resource
win11ltsc2024-20260709-en
10 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-07-31_c5d00a47f5f9be34dda6580c6df45067_amadey_elex_remcos_smoke-loader
- Size 2.0MB
- SHA256 aca50d73de673d1806cc1b86d439150056f64f4c4e6272839d2cebd4865c3341
- MD5 c5d00a47f5f9be34dda6580c6df45067
- SHA1 99022fdac61728775a87083159b4539815da7fdd
- SHA512 df04cf6e976ba278aedf8188f2ed5d7197ceca5e2c0e74a4d90c32689850442923ae835c645bb73d2405230a74bee1a374d1ab4920264275d0941cb88b264189
- SSDEEP 24576:mENJKEt6dq8hXj8R2vxW870KH9e5GqR6FokG81Cvz44sLy0aZJQ5Te6Lm:mENwzIR257BcIqR6FoRvku04YL
- TLSH T136A53A10A7508028FAE752F55AADE1BC951C7DF0879860CBB1D977FA46362F12D3328B
- MD5 SHA1 SHA512 SSDEEP TLSH
Score9/10-
Detects executables embedding registry key / value combination indicative of disabling Windows Defen
-
Executes dropped EXE
-
Loads dropped DLL
-
Drops file in System32 directory