General
- Target 2026-08-02_f3e15628b11c77d2170ab9530cfffce3_amadey_cobalt-strike_elex_remcos_smoke-loader_vidar
- Size 2.2MB
- Sample260802-mf821sgp5t
- SHA256 61bc64db212839dd764f89014e870ed0e0eeffe0cfaecdd55c81dd851cad4877
- MD5 f3e15628b11c77d2170ab9530cfffce3
- SHA1 bb591de29685230d02967e360b95d50c944731ae
- SHA512 d7369f7261e35656941c762e3da58d9b72df5982989723bc637409d7943cedc2218b6dc9cdc6b8d59781339acd62a86ed6070125c14d0fbb1e7c8d96c8a0a84d
- SSDEEP 49152:GENwzIR257BMIqR6FoRvku04YLTjz7dTf:GgwkQ7uIqMe
- TLSH T165B55B11B7508028FAF652B55BAEE1BC951C7CB0879860CFB1D577FA4A366F02D32287
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
9/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-08-02_f3e15628b11c77d2170ab9530cfffce3_amadey_cobalt-strike_elex_remcos_smoke-loader_vidar.exe
Resource
win10v2004-20260513-en
9 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-08-02_f3e15628b11c77d2170ab9530cfffce3_amadey_cobalt-strike_elex_remcos_smoke-loader_vidar.exe
Resource
win11ltsc2024-20260709-en
10 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-08-02_f3e15628b11c77d2170ab9530cfffce3_amadey_cobalt-strike_elex_remcos_smoke-loader_vidar
- Size 2.2MB
- SHA256 61bc64db212839dd764f89014e870ed0e0eeffe0cfaecdd55c81dd851cad4877
- MD5 f3e15628b11c77d2170ab9530cfffce3
- SHA1 bb591de29685230d02967e360b95d50c944731ae
- SHA512 d7369f7261e35656941c762e3da58d9b72df5982989723bc637409d7943cedc2218b6dc9cdc6b8d59781339acd62a86ed6070125c14d0fbb1e7c8d96c8a0a84d
- SSDEEP 49152:GENwzIR257BMIqR6FoRvku04YLTjz7dTf:GgwkQ7uIqMe
- TLSH T165B55B11B7508028FAF652B55BAEE1BC951C7CB0879860CFB1D577FA4A366F02D32287
- MD5 SHA1 SHA512 SSDEEP TLSH
Score9/10-
Detects executables embedding registry key / value combination indicative of disabling Windows Defen
-
Executes dropped EXE
-
Loads dropped DLL
-
Drops file in System32 directory