General
- Target 2026-08-02_cbccbf6bfd5af5ac184269df8a15b3ca_amadey_elex_remcos_smoke-loader_vidar
- Size 2.3MB
- Sample260802-mvcblaxzfx
- SHA256 7bf8571cd4690f0a5a781eca2e0bbe4ffdf304e6e71bb63d69af1a6b7e567548
- MD5 cbccbf6bfd5af5ac184269df8a15b3ca
- SHA1 e6f3afab5f1de662212c79f7336f437ec1465fe2
- SHA512 9b69fc5a398aa8340363bd264a599e5c76ba1421cd4b191a0b17a9742da5350b45b8374c5ee82b649af9154287f1e42b0e62fd23397d0f0269e5611e05c7353e
- SSDEEP 24576:XENJKEt6dq8hXj8R2vxW870KHje5GqR6FokG81Cvz44sLy0aZJQ5Te6LifVpi1xp:XENwzIR257BqIqR6FoRvku04YLqCz
- TLSH T193B54B10A7508024FAA753B54AAEE16895287CB0475850CBEDF577FECA3E6F02D3E247
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
9/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-08-02_cbccbf6bfd5af5ac184269df8a15b3ca_amadey_elex_remcos_smoke-loader_vidar.exe
Resource
win10v2004-20260513-en
9 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-08-02_cbccbf6bfd5af5ac184269df8a15b3ca_amadey_elex_remcos_smoke-loader_vidar.exe
Resource
win11ltsc2024-20260709-en
10 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-08-02_cbccbf6bfd5af5ac184269df8a15b3ca_amadey_elex_remcos_smoke-loader_vidar
- Size 2.3MB
- SHA256 7bf8571cd4690f0a5a781eca2e0bbe4ffdf304e6e71bb63d69af1a6b7e567548
- MD5 cbccbf6bfd5af5ac184269df8a15b3ca
- SHA1 e6f3afab5f1de662212c79f7336f437ec1465fe2
- SHA512 9b69fc5a398aa8340363bd264a599e5c76ba1421cd4b191a0b17a9742da5350b45b8374c5ee82b649af9154287f1e42b0e62fd23397d0f0269e5611e05c7353e
- SSDEEP 24576:XENJKEt6dq8hXj8R2vxW870KHje5GqR6FokG81Cvz44sLy0aZJQ5Te6LifVpi1xp:XENwzIR257BqIqR6FoRvku04YLqCz
- TLSH T193B54B10A7508024FAA753B54AAEE16895287CB0475850CBEDF577FECA3E6F02D3E247
- MD5 SHA1 SHA512 SSDEEP TLSH
Score9/10-
Detects executables embedding registry key / value combination indicative of disabling Windows Defen
-
Executes dropped EXE
-
Loads dropped DLL
-
Drops file in System32 directory