General
- Target 2026-08-02_f29e2c5d7199b583a56201a2328c168d_amadey_elex_remcos_smoke-loader_vidar
- Size 2.0MB
- Sample260802-mgngpsgp7s
- SHA256 ce93ee2f2abfa15353cf36a1279698c3274065622c4ae5d8726cd0fa1e15de52
- MD5 f29e2c5d7199b583a56201a2328c168d
- SHA1 4d160419c7d8deb56ccc576ea4e0ab458455a4e0
- SHA512 e23ba4a4113caadb2d09d320e297c3a757b7db56bacd4f55afaa071399ff7f9e3aa814129ef94bbb3c67bf127b637180e5530a5b4cd18cfade189b9c2883be6d
- SSDEEP 24576:GENJKEt6dq8hXj8R2vxW870KH2e5GqR6FokG81Cvz44sLy0aZJQ5Te6L9wUb:GENwzIR257B5IqR6FoRvku04YL6
- TLSH T102A54A10AB508028FAF752F55AADE1AC951D7DF08B9860CBB1D577FA46362F02D33287
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
9/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-08-02_f29e2c5d7199b583a56201a2328c168d_amadey_elex_remcos_smoke-loader_vidar.exe
Resource
win10v2004-20260513-en
9 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-08-02_f29e2c5d7199b583a56201a2328c168d_amadey_elex_remcos_smoke-loader_vidar.exe
Resource
win11ltsc2024-20260709-en
10 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-08-02_f29e2c5d7199b583a56201a2328c168d_amadey_elex_remcos_smoke-loader_vidar
- Size 2.0MB
- SHA256 ce93ee2f2abfa15353cf36a1279698c3274065622c4ae5d8726cd0fa1e15de52
- MD5 f29e2c5d7199b583a56201a2328c168d
- SHA1 4d160419c7d8deb56ccc576ea4e0ab458455a4e0
- SHA512 e23ba4a4113caadb2d09d320e297c3a757b7db56bacd4f55afaa071399ff7f9e3aa814129ef94bbb3c67bf127b637180e5530a5b4cd18cfade189b9c2883be6d
- SSDEEP 24576:GENJKEt6dq8hXj8R2vxW870KH2e5GqR6FokG81Cvz44sLy0aZJQ5Te6L9wUb:GENwzIR257B5IqR6FoRvku04YL6
- TLSH T102A54A10AB508028FAF752F55AADE1AC951D7DF08B9860CBB1D577FA46362F02D33287
- MD5 SHA1 SHA512 SSDEEP TLSH
Score9/10-
Detects executables embedding registry key / value combination indicative of disabling Windows Defen
-
Executes dropped EXE
-
Loads dropped DLL
-
Drops file in System32 directory