General
- Target 2026-08-02_17b39845541f1925fa2feaf65278f0b6_amadey_elex_remcos_smoke-loader
- Size 2.0MB
- Sample260802-pawkvaal3v
- SHA256 7c1c1242d44f84c73a39ae160250530bdca797e4b7f74cc79db305a25e597a0b
- MD5 17b39845541f1925fa2feaf65278f0b6
- SHA1 9156a725d34fb579815986e8e4e187abcfdb89a3
- SHA512 fd2e24d33ffd3f485b9794b7b25fd6c0dafb6d5906b5e620992507b121fec62d65f2a649f994eda65858ddbb3b3150397767839c01fe631aa9a238d0d6ec2793
- SSDEEP 24576:lENJKEt6dq8hXj8R2vxW870KHme5GqR6FokG81Cvz44sLy0aZJQ5Te6LM09:lENwzIR257BJIqR6FoRvku04YLM0
- TLSH T1BFA54A10A7508028FAF752B55ABDE1BC952D7CB08BA8A0CBA1D577FE46356F02D32347
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
9/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-08-02_17b39845541f1925fa2feaf65278f0b6_amadey_elex_remcos_smoke-loader.exe
Resource
win10v2004-20260513-en
9 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-08-02_17b39845541f1925fa2feaf65278f0b6_amadey_elex_remcos_smoke-loader.exe
Resource
win11ltsc2024-20260709-en
10 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-08-02_17b39845541f1925fa2feaf65278f0b6_amadey_elex_remcos_smoke-loader
- Size 2.0MB
- SHA256 7c1c1242d44f84c73a39ae160250530bdca797e4b7f74cc79db305a25e597a0b
- MD5 17b39845541f1925fa2feaf65278f0b6
- SHA1 9156a725d34fb579815986e8e4e187abcfdb89a3
- SHA512 fd2e24d33ffd3f485b9794b7b25fd6c0dafb6d5906b5e620992507b121fec62d65f2a649f994eda65858ddbb3b3150397767839c01fe631aa9a238d0d6ec2793
- SSDEEP 24576:lENJKEt6dq8hXj8R2vxW870KHme5GqR6FokG81Cvz44sLy0aZJQ5Te6LM09:lENwzIR257BJIqR6FoRvku04YLM0
- TLSH T1BFA54A10A7508028FAF752B55ABDE1BC952D7CB08BA8A0CBA1D577FE46356F02D32347
- MD5 SHA1 SHA512 SSDEEP TLSH
Score9/10-
Detects executables embedding registry key / value combination indicative of disabling Windows Defen
-
Executes dropped EXE
-
Loads dropped DLL
-
Drops file in System32 directory