General
- Target 2026-08-02_c54a130ab34fbdf1a9bb390119316011_amadey_elex_remcos_smoke-loader
- Size 3.2MB
- Sample260802-mw29eahj8v
- SHA256 1b91dd3983d52926955b5f372aeb516243cf13a23330fc6a6266196841a5a31b
- MD5 c54a130ab34fbdf1a9bb390119316011
- SHA1 8cbe7b170b5614254926cec350e1cf659a31f453
- SHA512 0ba7073bd8f9ade9c74a05c94315956f720f51e17223581094cab68f41914baeff4cb9760fc5852b2d5c2f94bd06818d27cb05ab93e16743cf2398e51d11b66d
- SSDEEP 49152:KENwzIR257BdIqR6FoRvku04YLc25lku:KgwkQ7DIqMe/zu
- TLSH T1B6F52810B7904054FDAE5DB54AA99178F529BCAF7F6CB1CB6C8072EE0A375E02D32352
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
9/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-08-02_c54a130ab34fbdf1a9bb390119316011_amadey_elex_remcos_smoke-loader.exe
Resource
win10v2004-20260513-en
10 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-08-02_c54a130ab34fbdf1a9bb390119316011_amadey_elex_remcos_smoke-loader.exe
Resource
win11ltsc2024-20260709-en
11 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-08-02_c54a130ab34fbdf1a9bb390119316011_amadey_elex_remcos_smoke-loader
- Size 3.2MB
- SHA256 1b91dd3983d52926955b5f372aeb516243cf13a23330fc6a6266196841a5a31b
- MD5 c54a130ab34fbdf1a9bb390119316011
- SHA1 8cbe7b170b5614254926cec350e1cf659a31f453
- SHA512 0ba7073bd8f9ade9c74a05c94315956f720f51e17223581094cab68f41914baeff4cb9760fc5852b2d5c2f94bd06818d27cb05ab93e16743cf2398e51d11b66d
- SSDEEP 49152:KENwzIR257BdIqR6FoRvku04YLc25lku:KgwkQ7DIqMe/zu
- TLSH T1B6F52810B7904054FDAE5DB54AA99178F529BCAF7F6CB1CB6C8072EE0A375E02D32352
- MD5 SHA1 SHA512 SSDEEP TLSH
Score9/10-
Detects executables embedding registry key / value combination indicative of disabling Windows Defen
-
Executes dropped EXE
-
Loads dropped DLL
-
Drops file in System32 directory