General
- Target 2026-08-15_1c083117390688c54c8476eff338df35_amadey_cobalt-strike_elex_remcos_smoke-loader_vidar
- Size 2.5MB
- Sample260815-qld1lsxcpg
- SHA256 4f2cf37b15c45b0edd380019415fb448d51244dca9f3e2ca0d05378aa27d95a9
- MD5 1c083117390688c54c8476eff338df35
- SHA1 607ceb829d183d0fe42f4bce4736838c59b7a1f1
- SHA512 441e3c85a5e0945b53246077ede83fb29b5ce0163a0df2c22fbbb32aa1f1301364ebec3283b3f38162b4fe52891775648b6108c7b9112b87ca50943acfb3b92c
- SSDEEP 49152:yENwzIR257BNIqR6FoRvku04YLy2Q6Gi:ygwkQ77IqMeG
- TLSH T1D6C57D10BB508024FAF752B55ABEE168952C7CF0A7A850CBA0D577FA4A366F06D33347
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
9/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-08-15_1c083117390688c54c8476eff338df35_amadey_cobalt-strike_elex_remcos_smoke-loader_vidar.exe
Resource
win10v2004-20260513-en
9 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-08-15_1c083117390688c54c8476eff338df35_amadey_cobalt-strike_elex_remcos_smoke-loader_vidar.exe
Resource
win11ltsc2024-20260709-en
10 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-08-15_1c083117390688c54c8476eff338df35_amadey_cobalt-strike_elex_remcos_smoke-loader_vidar
- Size 2.5MB
- SHA256 4f2cf37b15c45b0edd380019415fb448d51244dca9f3e2ca0d05378aa27d95a9
- MD5 1c083117390688c54c8476eff338df35
- SHA1 607ceb829d183d0fe42f4bce4736838c59b7a1f1
- SHA512 441e3c85a5e0945b53246077ede83fb29b5ce0163a0df2c22fbbb32aa1f1301364ebec3283b3f38162b4fe52891775648b6108c7b9112b87ca50943acfb3b92c
- SSDEEP 49152:yENwzIR257BNIqR6FoRvku04YLy2Q6Gi:ygwkQ77IqMeG
- TLSH T1D6C57D10BB508024FAF752B55ABEE168952C7CF0A7A850CBA0D577FA4A366F06D33347
- MD5 SHA1 SHA512 SSDEEP TLSH
Score9/10-
Detects executables embedding registry key / value combination indicative of disabling Windows Defen
-
Executes dropped EXE
-
Loads dropped DLL
-
Drops file in System32 directory