General
- Target 2026-08-02_a5b2ca2469406e061de5fe0ebadf1338_amadey_elex_remcos_smoke-loader
- Size 2.6MB
- Sample260802-m57v9aha88
- SHA256 44bb2bb63b12b9c6fdb8d15d9a3db2cd44d02ec4b9f58872f8cb4420180bb002
- MD5 a5b2ca2469406e061de5fe0ebadf1338
- SHA1 5cdc61a380a5dab77e1b9c364469eaa0c9121c1d
- SHA512 4b3b1192fbb4d7955091020bf1faefc5b962c38727df870cbf20c52d9467689a52cc8e1e667e86f60cd49ed6450f8a8289f01a0e4d13655ee2fb5ec4475b30a6
- SSDEEP 49152:iENwzIR257BZIqR6FoRvku04YLGV4DZwG:igwkQ73IqMe1+W
- TLSH T1C7C55A1CFF508C64FAA252B44AADE36C95287CB04B5850CB61D572FEDA36FE02D36247
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
9/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-08-02_a5b2ca2469406e061de5fe0ebadf1338_amadey_elex_remcos_smoke-loader.exe
Resource
win10v2004-20260513-en
9 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-08-02_a5b2ca2469406e061de5fe0ebadf1338_amadey_elex_remcos_smoke-loader.exe
Resource
win11ltsc2024-20260709-en
10 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-08-02_a5b2ca2469406e061de5fe0ebadf1338_amadey_elex_remcos_smoke-loader
- Size 2.6MB
- SHA256 44bb2bb63b12b9c6fdb8d15d9a3db2cd44d02ec4b9f58872f8cb4420180bb002
- MD5 a5b2ca2469406e061de5fe0ebadf1338
- SHA1 5cdc61a380a5dab77e1b9c364469eaa0c9121c1d
- SHA512 4b3b1192fbb4d7955091020bf1faefc5b962c38727df870cbf20c52d9467689a52cc8e1e667e86f60cd49ed6450f8a8289f01a0e4d13655ee2fb5ec4475b30a6
- SSDEEP 49152:iENwzIR257BZIqR6FoRvku04YLGV4DZwG:igwkQ73IqMe1+W
- TLSH T1C7C55A1CFF508C64FAA252B44AADE36C95287CB04B5850CB61D572FEDA36FE02D36247
- MD5 SHA1 SHA512 SSDEEP TLSH
Score9/10-
Detects executables embedding registry key / value combination indicative of disabling Windows Defen
-
Executes dropped EXE
-
Loads dropped DLL
-
Drops file in System32 directory