General
- Target 2026-08-02_f52349c832af71be89810b0832c46dad_amadey_elex_remcos_smoke-loader
- Size 4.0MB
- Sample260802-mf1qmsgp4s
- SHA256 01338ad306cdd7bac820a695e08829b43dd79535f70706f2b37961909ca570b3
- MD5 f52349c832af71be89810b0832c46dad
- SHA1 d7ae268c0e9cc163569cc2264edde910c66e0ce3
- SHA512 d2ab1fcbc1333e5143a8212b4751349e7d9863b8671a32fa9aae685d1f8f76b2d89a922ac8be20ad4aace8f52498f223a3894a5a43933ae32d04f7017044ac4a
- SSDEEP 49152:TENwzIR257BhIqR6FoRvku04YLRAdnTYLrEGSv3k5UHw6SNdX:TgwkQ7nIqMeaAhTYLrE9Q
- TLSH T1C4167E02772080E0E59A81F895A991B9D670BCF10F2455CB6295FBFE5F33BE06E36352
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
9/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-08-02_f52349c832af71be89810b0832c46dad_amadey_elex_remcos_smoke-loader.exe
Resource
win10v2004-20260513-en
9 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-08-02_f52349c832af71be89810b0832c46dad_amadey_elex_remcos_smoke-loader.exe
Resource
win11ltsc2024-20260709-en
10 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-08-02_f52349c832af71be89810b0832c46dad_amadey_elex_remcos_smoke-loader
- Size 4.0MB
- SHA256 01338ad306cdd7bac820a695e08829b43dd79535f70706f2b37961909ca570b3
- MD5 f52349c832af71be89810b0832c46dad
- SHA1 d7ae268c0e9cc163569cc2264edde910c66e0ce3
- SHA512 d2ab1fcbc1333e5143a8212b4751349e7d9863b8671a32fa9aae685d1f8f76b2d89a922ac8be20ad4aace8f52498f223a3894a5a43933ae32d04f7017044ac4a
- SSDEEP 49152:TENwzIR257BhIqR6FoRvku04YLRAdnTYLrEGSv3k5UHw6SNdX:TgwkQ7nIqMeaAhTYLrE9Q
- TLSH T1C4167E02772080E0E59A81F895A991B9D670BCF10F2455CB6295FBFE5F33BE06E36352
- MD5 SHA1 SHA512 SSDEEP TLSH
Score9/10-
Detects executables embedding registry key / value combination indicative of disabling Windows Defen
-
Executes dropped EXE
-
Loads dropped DLL
-
Drops file in System32 directory