General
- Target 2026-08-02_020c8665dbda5b4f429f0534c32b6f4e_amadey_elex_remcos_smoke-loader
- Size 2.2MB
- Sample260802-pg5r4azsaw
- SHA256 efa602ec59636aabe201a7f979fd4add815818d452b7191a7fc3f3a1de6982e1
- MD5 020c8665dbda5b4f429f0534c32b6f4e
- SHA1 f1cd9969491634b04826ad7e091ec3b8a678a377
- SHA512 5199b3cd6c7d7aa58c39d16ecda0a00a7cea93df5cc0893cdb2eb2f929613bd06fd1ca5801c2e97c2ebfc645dc51480d43f1ff9b5bbc8d4b3ee70e2c03b34bfb
- SSDEEP 24576:qENJKEt6dq8hXj8R2vxW870KHqe5GqR6FokG81Cvz44sLy0aZJQ5Te6LuDU1qloL:qENwzIR257B9IqR6FoRvku04YLwG
- TLSH T145B55B11A7508029FAE752F55AAEE17C95287CF087A860CFA1D577FA46352F02E33387
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
9/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-08-02_020c8665dbda5b4f429f0534c32b6f4e_amadey_elex_remcos_smoke-loader.exe
Resource
win10v2004-20260513-en
9 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-08-02_020c8665dbda5b4f429f0534c32b6f4e_amadey_elex_remcos_smoke-loader.exe
Resource
win11ltsc2024-20260709-en
10 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-08-02_020c8665dbda5b4f429f0534c32b6f4e_amadey_elex_remcos_smoke-loader
- Size 2.2MB
- SHA256 efa602ec59636aabe201a7f979fd4add815818d452b7191a7fc3f3a1de6982e1
- MD5 020c8665dbda5b4f429f0534c32b6f4e
- SHA1 f1cd9969491634b04826ad7e091ec3b8a678a377
- SHA512 5199b3cd6c7d7aa58c39d16ecda0a00a7cea93df5cc0893cdb2eb2f929613bd06fd1ca5801c2e97c2ebfc645dc51480d43f1ff9b5bbc8d4b3ee70e2c03b34bfb
- SSDEEP 24576:qENJKEt6dq8hXj8R2vxW870KHqe5GqR6FokG81Cvz44sLy0aZJQ5Te6LuDU1qloL:qENwzIR257B9IqR6FoRvku04YLwG
- TLSH T145B55B11A7508029FAE752F55AAEE17C95287CF087A860CFA1D577FA46352F02E33387
- MD5 SHA1 SHA512 SSDEEP TLSH
Score9/10-
Detects executables embedding registry key / value combination indicative of disabling Windows Defen
-
Executes dropped EXE
-
Loads dropped DLL
-
Drops file in System32 directory