General
- Target 2026-08-02_54c71477a7d279c7104a63372ade2ddd_amadey_elex_remcos_smoke-loader
- Size 2.9MB
- Sample260802-ntfhasywfz
- SHA256 c23fe885aa2897579d3bf540c03396334e1e6af1fe7aebc9aed335a9fb4500de
- MD5 54c71477a7d279c7104a63372ade2ddd
- SHA1 2924a27db256d7ab54f6742692bbb6727ec82a86
- SHA512 454c7967d521326a2833ce5df78e07e6cc7f8a3ac2b95f73ecfec7d4a95e67ef8bee67e84f5a4e141669bd086eb4ffef6cc38b12278efe94a5c6ef42cec90f33
- SSDEEP 24576:CENJKEt6dq8hXj8R2vxW870KHae5GqR6FokG81Cvz44sLy0aZJQ5Te6L5+ZW:CENwzIR257BNIqR6FoRvku04YLQ
- TLSH T1C0E581036E0C8A34EA9F3EB04D59D3E841047E60875638D76CC57EEDE6B19E4393E266
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
9/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-08-02_54c71477a7d279c7104a63372ade2ddd_amadey_elex_remcos_smoke-loader.exe
Resource
win10v2004-20260513-en
9 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-08-02_54c71477a7d279c7104a63372ade2ddd_amadey_elex_remcos_smoke-loader.exe
Resource
win11ltsc2024-20260709-en
10 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-08-02_54c71477a7d279c7104a63372ade2ddd_amadey_elex_remcos_smoke-loader
- Size 2.9MB
- SHA256 c23fe885aa2897579d3bf540c03396334e1e6af1fe7aebc9aed335a9fb4500de
- MD5 54c71477a7d279c7104a63372ade2ddd
- SHA1 2924a27db256d7ab54f6742692bbb6727ec82a86
- SHA512 454c7967d521326a2833ce5df78e07e6cc7f8a3ac2b95f73ecfec7d4a95e67ef8bee67e84f5a4e141669bd086eb4ffef6cc38b12278efe94a5c6ef42cec90f33
- SSDEEP 24576:CENJKEt6dq8hXj8R2vxW870KHae5GqR6FokG81Cvz44sLy0aZJQ5Te6L5+ZW:CENwzIR257BNIqR6FoRvku04YLQ
- TLSH T1C0E581036E0C8A34EA9F3EB04D59D3E841047E60875638D76CC57EEDE6B19E4393E266
- MD5 SHA1 SHA512 SSDEEP TLSH
Score9/10-
Detects executables embedding registry key / value combination indicative of disabling Windows Defen
-
Executes dropped EXE
-
Loads dropped DLL
-
Drops file in System32 directory