General
- Target 2026-08-02_36f81c70574aac55ae35246d77d1406d_amadey_elex_remcos_smoke-loader_vidar
- Size 3.7MB
- Sample260802-n13leahe92
- SHA256 6d116e9fd75ddd383e44cfb4aa36a75fda1f4eb279be4e732f2d79a278653345
- MD5 36f81c70574aac55ae35246d77d1406d
- SHA1 1ecc362d74a9ed78ccca1744c2164c40456a63d3
- SHA512 bb40324d3cc75a394e4679d935a5312040710500802162a13104b6a4056af1219270d632c96648a64f95524b0f6712327fcc9fa4e8066c3494fc594f1d78e505
- SSDEEP 49152:TENwzIR257B0IqR6FoRvku04YL+VMNuYFMq2qDF:TgwkQ72IqMeHVMN
- TLSH T131061942F603D80BE7D5E4708969D67552653BBD87F744EFB89C71D8E22A2E33831A02
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
9/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-08-02_36f81c70574aac55ae35246d77d1406d_amadey_elex_remcos_smoke-loader_vidar.exe
Resource
win10v2004-20260513-en
9 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-08-02_36f81c70574aac55ae35246d77d1406d_amadey_elex_remcos_smoke-loader_vidar.exe
Resource
win11ltsc2024-20260709-en
10 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-08-02_36f81c70574aac55ae35246d77d1406d_amadey_elex_remcos_smoke-loader_vidar
- Size 3.7MB
- SHA256 6d116e9fd75ddd383e44cfb4aa36a75fda1f4eb279be4e732f2d79a278653345
- MD5 36f81c70574aac55ae35246d77d1406d
- SHA1 1ecc362d74a9ed78ccca1744c2164c40456a63d3
- SHA512 bb40324d3cc75a394e4679d935a5312040710500802162a13104b6a4056af1219270d632c96648a64f95524b0f6712327fcc9fa4e8066c3494fc594f1d78e505
- SSDEEP 49152:TENwzIR257B0IqR6FoRvku04YL+VMNuYFMq2qDF:TgwkQ72IqMeHVMN
- TLSH T131061942F603D80BE7D5E4708969D67552653BBD87F744EFB89C71D8E22A2E33831A02
- MD5 SHA1 SHA512 SSDEEP TLSH
Score9/10-
Detects executables embedding registry key / value combination indicative of disabling Windows Defen
-
Executes dropped EXE
-
Loads dropped DLL
-
Drops file in System32 directory