General
- Target 2026-08-02_a6b79be6305d4dd78f0c32bb72f65df4_amadey_elex_remcos_smoke-loader
- Size 2.0MB
- Sample260802-m52dgaha84
- SHA256 ac0c6fe93863af4e6bdc4a0a14c904daf06ec1a8785cc1c26537b37a84e58ac2
- MD5 a6b79be6305d4dd78f0c32bb72f65df4
- SHA1 be297f5c2678f063ef1e4225d0df43a08c1ba352
- SHA512 b0697ae98566cba201183e9f0cdeb27ecd9d63031cb954e03e3f2d131dc92ba1e99992e4ab139ec08fafc486357c2d343dce27fd35bfcada1703ec50991650dd
- SSDEEP 24576:vENJKEt6dq8hXj8R2vxW870KHee5GqR6FokG81Cvz44sLy0aZJQ5Te6L3i:vENwzIR257BBIqR6FoRvku04YL
- TLSH T162A54A10AB508028FAF752F55AADE1BC951D7DF08B9860CBA1D577FA46362F02D33287
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
9/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-08-02_a6b79be6305d4dd78f0c32bb72f65df4_amadey_elex_remcos_smoke-loader.exe
Resource
win10v2004-20260513-en
9 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-08-02_a6b79be6305d4dd78f0c32bb72f65df4_amadey_elex_remcos_smoke-loader.exe
Resource
win11ltsc2024-20260709-en
10 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-08-02_a6b79be6305d4dd78f0c32bb72f65df4_amadey_elex_remcos_smoke-loader
- Size 2.0MB
- SHA256 ac0c6fe93863af4e6bdc4a0a14c904daf06ec1a8785cc1c26537b37a84e58ac2
- MD5 a6b79be6305d4dd78f0c32bb72f65df4
- SHA1 be297f5c2678f063ef1e4225d0df43a08c1ba352
- SHA512 b0697ae98566cba201183e9f0cdeb27ecd9d63031cb954e03e3f2d131dc92ba1e99992e4ab139ec08fafc486357c2d343dce27fd35bfcada1703ec50991650dd
- SSDEEP 24576:vENJKEt6dq8hXj8R2vxW870KHee5GqR6FokG81Cvz44sLy0aZJQ5Te6L3i:vENwzIR257BBIqR6FoRvku04YL
- TLSH T162A54A10AB508028FAF752F55AADE1BC951D7DF08B9860CBA1D577FA46362F02D33287
- MD5 SHA1 SHA512 SSDEEP TLSH
Score9/10-
Detects executables embedding registry key / value combination indicative of disabling Windows Defen
-
Executes dropped EXE
-
Loads dropped DLL
-
Drops file in System32 directory