General
- Target 2026-08-02_8fdf1b21080f3d7516cc0e87c088d55e_amadey_cobalt-strike_elex_remcos_smoke-loader_vidar
- Size 4.3MB
- Sample260802-nbxnvs1gma
- SHA256 604f5ff133687aba222c73ea0a1b58179596fc27592bf09795b16fee7ab9edd4
- MD5 8fdf1b21080f3d7516cc0e87c088d55e
- SHA1 32b4bee0489e869969ac4a86dee7e505300521ef
- SHA512 b692861f44e4a6a267ea7729789a1cc44c5d31342c3193fef6f5371a61d1767d6f3192324ad2f228a473fd2aba2dbf22d709c75ed75afb458208e7cd3dde6139
- SSDEEP 98304:wgwkQ7eIqMe7+jC5xEuRz8qMrbgMUnxF58:wgwkKi7+jC5xEaz8qMrbgMUnxF58
- TLSH T1CE265B1167B440E4E5B6D27D4667A229E5323C6C8324F2DB649167BB0F333E19F7AB02
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
9/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-08-02_8fdf1b21080f3d7516cc0e87c088d55e_amadey_cobalt-strike_elex_remcos_smoke-loader_vidar.exe
Resource
win10v2004-20260513-en
9 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-08-02_8fdf1b21080f3d7516cc0e87c088d55e_amadey_cobalt-strike_elex_remcos_smoke-loader_vidar.exe
Resource
win11ltsc2024-20260709-en
10 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-08-02_8fdf1b21080f3d7516cc0e87c088d55e_amadey_cobalt-strike_elex_remcos_smoke-loader_vidar
- Size 4.3MB
- SHA256 604f5ff133687aba222c73ea0a1b58179596fc27592bf09795b16fee7ab9edd4
- MD5 8fdf1b21080f3d7516cc0e87c088d55e
- SHA1 32b4bee0489e869969ac4a86dee7e505300521ef
- SHA512 b692861f44e4a6a267ea7729789a1cc44c5d31342c3193fef6f5371a61d1767d6f3192324ad2f228a473fd2aba2dbf22d709c75ed75afb458208e7cd3dde6139
- SSDEEP 98304:wgwkQ7eIqMe7+jC5xEuRz8qMrbgMUnxF58:wgwkKi7+jC5xEaz8qMrbgMUnxF58
- TLSH T1CE265B1167B440E4E5B6D27D4667A229E5323C6C8324F2DB649167BB0F333E19F7AB02
- MD5 SHA1 SHA512 SSDEEP TLSH
Score9/10-
Detects executables embedding registry key / value combination indicative of disabling Windows Defen
-
Executes dropped EXE
-
Loads dropped DLL
-
Drops file in System32 directory