General
- Target 2026-08-01_611ac16275807478b3802171a3f9bce0_amadey_elex_remcos_smoke-loader
- Size 3.2MB
- Sample260802-aybs1sap3z
- SHA256 7e9073a65ef324a573fb389cdaee4ed5076b1648018633345fc40d8827cf4588
- MD5 611ac16275807478b3802171a3f9bce0
- SHA1 248599ab18fdc9df5211a1c323891d3a4cbbf4c5
- SHA512 c470f95c938a550b6bb302101d22e5ee7f2ae95830c2df539025a07cd8268cb754dcf22922ec84541a73dedb4c9c4bb47735ff6f41083e8fdc442948d65fac51
- SSDEEP 49152:KENwzIR257BdIqR6FoRvku04YLK25lku:KgwkQ7DIqMeVzu
- TLSH T1B8F52810B7904054FDAE5EB54AA99178F525BCAF7F2CB1CB6C8072EE0A375E06D32352
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
9/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-08-01_611ac16275807478b3802171a3f9bce0_amadey_elex_remcos_smoke-loader.exe
Resource
win10v2004-20260513-en
10 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-08-01_611ac16275807478b3802171a3f9bce0_amadey_elex_remcos_smoke-loader.exe
Resource
win11ltsc2024-20260709-en
11 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-08-01_611ac16275807478b3802171a3f9bce0_amadey_elex_remcos_smoke-loader
- Size 3.2MB
- SHA256 7e9073a65ef324a573fb389cdaee4ed5076b1648018633345fc40d8827cf4588
- MD5 611ac16275807478b3802171a3f9bce0
- SHA1 248599ab18fdc9df5211a1c323891d3a4cbbf4c5
- SHA512 c470f95c938a550b6bb302101d22e5ee7f2ae95830c2df539025a07cd8268cb754dcf22922ec84541a73dedb4c9c4bb47735ff6f41083e8fdc442948d65fac51
- SSDEEP 49152:KENwzIR257BdIqR6FoRvku04YLK25lku:KgwkQ7DIqMeVzu
- TLSH T1B8F52810B7904054FDAE5EB54AA99178F525BCAF7F2CB1CB6C8072EE0A375E06D32352
- MD5 SHA1 SHA512 SSDEEP TLSH
Score9/10-
Detects executables embedding registry key / value combination indicative of disabling Windows Defen
-
Executes dropped EXE
-
Loads dropped DLL
-
Drops file in System32 directory