General
- Target 2026-09-01_6f04e5792625c37a702a6898d5eccdfe_amadey_elex_icedid_njrat_remcos_smoke-loader_vidar
- Size 2.2MB
- Sample260903-l571ksvanb
- SHA256 021bf12c637f11b26e1c967ccab2f3e9858a5fe08d0d5c1f52cbb884648a5a3c
- MD5 6f04e5792625c37a702a6898d5eccdfe
- SHA1 b1edf5d2e0a20df174b029756c2385ffff473c05
- SHA512 03bc9fd5658b7c7a9f0b24613b062a1f47ed8440d6f4973be55c1d71abc00c7a890ac7d7a037889a495b2d7664629da9862d6a77165e8dc65ebe89a0bde9c01e
- SSDEEP 24576:bENJKEt6dq8hXj8R2vxW870KHJe5GqR6FokG81Cvz44sLy0aZJQ5Te6LFwukOWyD:bENwzIR257BoIqR6FoRvku04YLFw7OB
- TLSH T1C1B55B10B7508029FAF752B54AAEE17CA52D7DB0879860CBA1D577FA4A362F02D33347
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
9/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-09-01_6f04e5792625c37a702a6898d5eccdfe_amadey_elex_icedid_njrat_remcos_smoke-loader_vidar.exe
Resource
win10v2004-20260513-en
9 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-09-01_6f04e5792625c37a702a6898d5eccdfe_amadey_elex_icedid_njrat_remcos_smoke-loader_vidar.exe
Resource
win11ltsc2024-20260710-en
10 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-09-01_6f04e5792625c37a702a6898d5eccdfe_amadey_elex_icedid_njrat_remcos_smoke-loader_vidar
- Size 2.2MB
- SHA256 021bf12c637f11b26e1c967ccab2f3e9858a5fe08d0d5c1f52cbb884648a5a3c
- MD5 6f04e5792625c37a702a6898d5eccdfe
- SHA1 b1edf5d2e0a20df174b029756c2385ffff473c05
- SHA512 03bc9fd5658b7c7a9f0b24613b062a1f47ed8440d6f4973be55c1d71abc00c7a890ac7d7a037889a495b2d7664629da9862d6a77165e8dc65ebe89a0bde9c01e
- SSDEEP 24576:bENJKEt6dq8hXj8R2vxW870KHJe5GqR6FokG81Cvz44sLy0aZJQ5Te6LFwukOWyD:bENwzIR257BoIqR6FoRvku04YLFw7OB
- TLSH T1C1B55B10B7508029FAF752B54AAEE17CA52D7DB0879860CBA1D577FA4A362F02D33347
- MD5 SHA1 SHA512 SSDEEP TLSH
Score9/10-
Detects executables embedding registry key / value combination indicative of disabling Windows Defen
-
Executes dropped EXE
-
Loads dropped DLL
-
Drops file in System32 directory