General
- Target 2026-08-12_b966f543e44d5fdfc636010900da4b70_amadey_elex_mespinoza_remcos_smoke-loader
- Size 11.1MB
- Sample260812-rlkntsyfjd
- SHA256 850a15aa0e5fb541748f274c300a41c4608ac88dc83113255d1023f0c1b5466b
- MD5 b966f543e44d5fdfc636010900da4b70
- SHA1 97cfb91cde28beadf7f283f84cce5c61900d33d9
- SHA512 4841b789b66e1a6ac1abda3b27ecf6b8b5723a1d3da75e2cc13af69e7e4c2cba017dcd22bb5193e5b2f96fdc514e5eeba3a573335784bbc74493581001220db1
- SSDEEP 196608:n3htRKO/yH9W7VQ5YPkLe2EWotQqlOpe+L4oF3rKMQjkT85Fq9wBq:n3Es0Ywe2BotQqlOc+L4ooML850a
- TLSH T1CAC622D172A2FD34D76605B00C2A63E8962365313710D9E3BECF76C6586D2D4AEF0A72
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
7/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-08-12_b966f543e44d5fdfc636010900da4b70_amadey_elex_mespinoza_remcos_smoke-loader.exe
Resource
win10v2004-20260513-en
8 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-08-12_b966f543e44d5fdfc636010900da4b70_amadey_elex_mespinoza_remcos_smoke-loader.exe
Resource
win11ltsc2024-20260709-en
9 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-08-12_b966f543e44d5fdfc636010900da4b70_amadey_elex_mespinoza_remcos_smoke-loader
- Size 11.1MB
- SHA256 850a15aa0e5fb541748f274c300a41c4608ac88dc83113255d1023f0c1b5466b
- MD5 b966f543e44d5fdfc636010900da4b70
- SHA1 97cfb91cde28beadf7f283f84cce5c61900d33d9
- SHA512 4841b789b66e1a6ac1abda3b27ecf6b8b5723a1d3da75e2cc13af69e7e4c2cba017dcd22bb5193e5b2f96fdc514e5eeba3a573335784bbc74493581001220db1
- SSDEEP 196608:n3htRKO/yH9W7VQ5YPkLe2EWotQqlOpe+L4oF3rKMQjkT85Fq9wBq:n3Es0Ywe2BotQqlOc+L4ooML850a
- TLSH T1CAC622D172A2FD34D76605B00C2A63E8962365313710D9E3BECF76C6586D2D4AEF0A72
- MD5 SHA1 SHA512 SSDEEP TLSH
Score7/10-
Executes dropped EXE
-
Checks installed software on the system
Looks up Uninstall key entries in the registry to enumerate software on the system.