General
- Target 2026-08-14_2daffa6c999bf7e6cfa7433c27b7bf9c_amadey_elex_mespinoza_remcos_smoke-loader
- Size 11.1MB
- Sample260815-afn1mavyf1
- SHA256 ef324cefb0398b524add4a83eae16a4208db3a7be2f70de4c81625a6b408672b
- MD5 2daffa6c999bf7e6cfa7433c27b7bf9c
- SHA1 0f63e8b1e082791087cfed936e6d623b82c93eae
- SHA512 02818c7a797a275b29e14bbc9179737388373d4b94e2a19ec137cf4d8774118045fc0a6712cb2ade4900420390878740b95aa87611b7600e8fb95ffd001936fc
- SSDEEP 196608:w3aFPnn8DU3eQkypOBIfNfq4H/0tQgxVJpMT+VVcY/dZISHHcUQvDw:w2wU3tpxlfq9CgxnpIwuYVZncc
- TLSH T1A7C622D17391FD78C36A05B10C2963E8422725303314E9E7BE8FBAD6496D2D4ADF0A76
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
7/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-08-14_2daffa6c999bf7e6cfa7433c27b7bf9c_amadey_elex_mespinoza_remcos_smoke-loader.exe
Resource
win10v2004-20260513-en
8 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-08-14_2daffa6c999bf7e6cfa7433c27b7bf9c_amadey_elex_mespinoza_remcos_smoke-loader.exe
Resource
win11ltsc2024-20260709-en
9 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-08-14_2daffa6c999bf7e6cfa7433c27b7bf9c_amadey_elex_mespinoza_remcos_smoke-loader
- Size 11.1MB
- SHA256 ef324cefb0398b524add4a83eae16a4208db3a7be2f70de4c81625a6b408672b
- MD5 2daffa6c999bf7e6cfa7433c27b7bf9c
- SHA1 0f63e8b1e082791087cfed936e6d623b82c93eae
- SHA512 02818c7a797a275b29e14bbc9179737388373d4b94e2a19ec137cf4d8774118045fc0a6712cb2ade4900420390878740b95aa87611b7600e8fb95ffd001936fc
- SSDEEP 196608:w3aFPnn8DU3eQkypOBIfNfq4H/0tQgxVJpMT+VVcY/dZISHHcUQvDw:w2wU3tpxlfq9CgxnpIwuYVZncc
- TLSH T1A7C622D17391FD78C36A05B10C2963E8422725303314E9E7BE8FBAD6496D2D4ADF0A76
- MD5 SHA1 SHA512 SSDEEP TLSH
Score7/10-
Executes dropped EXE
-
Checks installed software on the system
Looks up Uninstall key entries in the registry to enumerate software on the system.