General
- Target 2026-08-03_f2bbdc688c5431ba6481e73473e74874_amadey_elex_remcos_smoke-loader
- Size 3.8MB
- Sample260803-tzaf5avxhy
- SHA256 03aac26500436ee6cd619f9ed6a30e277983456c8c3954b075fdf2d480947ec0
- MD5 f2bbdc688c5431ba6481e73473e74874
- SHA1 7acc9edd52cb97e17678819e6b7bad4b97f5f092
- SHA512 e062d39379cdb5e557f400ead947cf3d120bfe68002e9d30bd71577b267349b68026384857eb6da17d827c03c559f31070c06657bd23f9b349adbfab11638f99
- SSDEEP 49152:lENwzIR257BMIqR6FoRvku04YLgS/T/u1Ib+IbqtvQ/anwzFH:lgwkQ7mIqMei7/u1k+kqtvOan
- TLSH T126162810A6C3802CEDE63DB126BFE9F86F196CA8475411C770B53EE95735AE2193234E
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
9/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-08-03_f2bbdc688c5431ba6481e73473e74874_amadey_elex_remcos_smoke-loader.exe
Resource
win10v2004-20260513-en
9 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-08-03_f2bbdc688c5431ba6481e73473e74874_amadey_elex_remcos_smoke-loader.exe
Resource
win11ltsc2024-20260710-en
10 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-08-03_f2bbdc688c5431ba6481e73473e74874_amadey_elex_remcos_smoke-loader
- Size 3.8MB
- SHA256 03aac26500436ee6cd619f9ed6a30e277983456c8c3954b075fdf2d480947ec0
- MD5 f2bbdc688c5431ba6481e73473e74874
- SHA1 7acc9edd52cb97e17678819e6b7bad4b97f5f092
- SHA512 e062d39379cdb5e557f400ead947cf3d120bfe68002e9d30bd71577b267349b68026384857eb6da17d827c03c559f31070c06657bd23f9b349adbfab11638f99
- SSDEEP 49152:lENwzIR257BMIqR6FoRvku04YLgS/T/u1Ib+IbqtvQ/anwzFH:lgwkQ7mIqMei7/u1k+kqtvOan
- TLSH T126162810A6C3802CEDE63DB126BFE9F86F196CA8475411C770B53EE95735AE2193234E
- MD5 SHA1 SHA512 SSDEEP TLSH
Score9/10-
Detects executables embedding registry key / value combination indicative of disabling Windows Defen
-
Executes dropped EXE
-
Loads dropped DLL
-
Drops file in System32 directory