General
- Target 2026-08-02_16cd556557779ef66875b513b7df7cee_amadey_elex_remcos_smoke-loader
- Size 2.0MB
- Sample260802-pba1jayzgy
- SHA256 98bb9b06be4321c923ac5eeae2f0a2b16d0027aef36468ec7a1c2e029d6e448d
- MD5 16cd556557779ef66875b513b7df7cee
- SHA1 e51fe69f67b9cc599ee12b9b57b3b58cdb66d722
- SHA512 534d24cb64dd445b48fceacbe28ebf77ec64193ff4237b49dc500de879642d5fc1d6850b172638f01bac09fce3acf391bf7a682522274e255a24753c30e0cc6c
- SSDEEP 24576:mENJKEt6dq8hXj8R2vxW870KH9e5GqR6FokG81Cvz44sLy0aZJQ5Te6Lg:mENwzIR257BcIqR6FoRvku04YL
- TLSH T160A53A10AB508028FAE752F55AADE1BC951D7DF0879860CBB1D977FA46362F02D33287
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
9/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-08-02_16cd556557779ef66875b513b7df7cee_amadey_elex_remcos_smoke-loader.exe
Resource
win10v2004-20260513-en
9 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-08-02_16cd556557779ef66875b513b7df7cee_amadey_elex_remcos_smoke-loader.exe
Resource
win11ltsc2024-20260710-en
10 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-08-02_16cd556557779ef66875b513b7df7cee_amadey_elex_remcos_smoke-loader
- Size 2.0MB
- SHA256 98bb9b06be4321c923ac5eeae2f0a2b16d0027aef36468ec7a1c2e029d6e448d
- MD5 16cd556557779ef66875b513b7df7cee
- SHA1 e51fe69f67b9cc599ee12b9b57b3b58cdb66d722
- SHA512 534d24cb64dd445b48fceacbe28ebf77ec64193ff4237b49dc500de879642d5fc1d6850b172638f01bac09fce3acf391bf7a682522274e255a24753c30e0cc6c
- SSDEEP 24576:mENJKEt6dq8hXj8R2vxW870KH9e5GqR6FokG81Cvz44sLy0aZJQ5Te6Lg:mENwzIR257BcIqR6FoRvku04YL
- TLSH T160A53A10AB508028FAE752F55AADE1BC951D7DF0879860CBB1D977FA46362F02D33287
- MD5 SHA1 SHA512 SSDEEP TLSH
Score9/10-
Detects executables embedding registry key / value combination indicative of disabling Windows Defen
-
Executes dropped EXE
-
Loads dropped DLL
-
Drops file in System32 directory