General
- Target 2026-07-31_0e2dd06d299da092eadc9bdd870c9711_amadey_cobalt-strike_elex_remcos_smoke-loader_vidar
- Size 2.2MB
- Sample260731-xyvmfszbma
- SHA256 ace182c4f67e4a083989a2c33d53a017c01704135d816f457bbf5abe1a00d4aa
- MD5 0e2dd06d299da092eadc9bdd870c9711
- SHA1 3ee594573d72c50135db3aa96294b1543a960422
- SHA512 4f32373b8efd9611f77cefa826b258a4fb07b5399e4f7a71b45c9125d8a6b9c5885148b353985f83fe3ea54796ff2b13043153d51e7600977db5efeb091691e7
- SSDEEP 49152:GENwzIR257BMIqR6FoRvku04YLBjz7dTf:GgwkQ7uIqMe
- TLSH T1DFB55B11B7508028FAF652B55BAEE178951C7CB0879860CFB1C577FA4A366F12D3328B
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
9/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-07-31_0e2dd06d299da092eadc9bdd870c9711_amadey_cobalt-strike_elex_remcos_smoke-loader_vidar.exe
Resource
win10v2004-20260513-en
9 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-07-31_0e2dd06d299da092eadc9bdd870c9711_amadey_cobalt-strike_elex_remcos_smoke-loader_vidar.exe
Resource
win11ltsc2024-20260709-en
10 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-07-31_0e2dd06d299da092eadc9bdd870c9711_amadey_cobalt-strike_elex_remcos_smoke-loader_vidar
- Size 2.2MB
- SHA256 ace182c4f67e4a083989a2c33d53a017c01704135d816f457bbf5abe1a00d4aa
- MD5 0e2dd06d299da092eadc9bdd870c9711
- SHA1 3ee594573d72c50135db3aa96294b1543a960422
- SHA512 4f32373b8efd9611f77cefa826b258a4fb07b5399e4f7a71b45c9125d8a6b9c5885148b353985f83fe3ea54796ff2b13043153d51e7600977db5efeb091691e7
- SSDEEP 49152:GENwzIR257BMIqR6FoRvku04YLBjz7dTf:GgwkQ7uIqMe
- TLSH T1DFB55B11B7508028FAF652B55BAEE178951C7CB0879860CFB1C577FA4A366F12D3328B
- MD5 SHA1 SHA512 SSDEEP TLSH
Score9/10-
Detects executables embedding registry key / value combination indicative of disabling Windows Defen
-
Executes dropped EXE
-
Loads dropped DLL
-
Drops file in System32 directory