General
- Target 2026-08-02_752348c8f14835891d946f08f07d92ac_amadey_elex_remcos_smoke-loader
- Size 3.8MB
- Sample260802-wn48gavscs
- SHA256 844adbbbb7dda5287c2cc5954ce9e9ce00ec1faf04fdc5d009492d30e68b049f
- MD5 752348c8f14835891d946f08f07d92ac
- SHA1 0b225fc29cfee6731e746c35e05297c0d137ff0a
- SHA512 0749f8a2aed97d7f8730df779e74f2da352b28ede136425408d228cf433a05881cb16daed79bcc7d8cbe38e9d182613f0d13a6b24cdd1fa6405431ed8befe91d
- SSDEEP 49152:lENwzIR257BMIqR6FoRvku04YLNS/T/u1Ib+IbqtvQ/anwzFH:lgwkQ7mIqMe97/u1k+kqtvOan
- TLSH T17C162810A6C3802CEDE63DB126BFE9F86F196CA8475411C770B53EE95735AE2193234E
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
9/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-08-02_752348c8f14835891d946f08f07d92ac_amadey_elex_remcos_smoke-loader.exe
Resource
win10v2004-20260513-en
9 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-08-02_752348c8f14835891d946f08f07d92ac_amadey_elex_remcos_smoke-loader.exe
Resource
win11ltsc2024-20260709-en
10 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-08-02_752348c8f14835891d946f08f07d92ac_amadey_elex_remcos_smoke-loader
- Size 3.8MB
- SHA256 844adbbbb7dda5287c2cc5954ce9e9ce00ec1faf04fdc5d009492d30e68b049f
- MD5 752348c8f14835891d946f08f07d92ac
- SHA1 0b225fc29cfee6731e746c35e05297c0d137ff0a
- SHA512 0749f8a2aed97d7f8730df779e74f2da352b28ede136425408d228cf433a05881cb16daed79bcc7d8cbe38e9d182613f0d13a6b24cdd1fa6405431ed8befe91d
- SSDEEP 49152:lENwzIR257BMIqR6FoRvku04YLNS/T/u1Ib+IbqtvQ/anwzFH:lgwkQ7mIqMe97/u1k+kqtvOan
- TLSH T17C162810A6C3802CEDE63DB126BFE9F86F196CA8475411C770B53EE95735AE2193234E
- MD5 SHA1 SHA512 SSDEEP TLSH
Score9/10-
Detects executables embedding registry key / value combination indicative of disabling Windows Defen
-
Executes dropped EXE
-
Loads dropped DLL
-
Drops file in System32 directory