General
- Target 2026-09-06_b2e68aee8c1dd8ab4a77b73d8e02db2d_amadey_elex_remcos_smoke-loader
- Size 4.0MB
- Sample260906-ynad7sda65
- SHA256 2fe391219edd02109e9e596cbb6a92e9518c6017b4f1dbaa9c9d3d6912dfe6f3
- MD5 b2e68aee8c1dd8ab4a77b73d8e02db2d
- SHA1 ac04e77c910d1b8f4008518a6b2fde91f526341b
- SHA512 abbd6730713f78315520cf7a5eeaf675af760e67357339d682de468a1912b4eb595ad26277e34f42c7286f99bea7fe3c8b64806f3ce96d412923ace3b436b79c
- SSDEEP 49152:0ENwzIR257BIIqR6FoRvku04YL/ENwzIR257BBIqR6FoRvku04YL:0gwkQ7yIqMeOgwkQ73IqMe
- TLSH T154163A10AB508029FAF752F55AADE1BC951C7DF0879860CBA1D577FA46362F02D3328B
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
9/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-09-06_b2e68aee8c1dd8ab4a77b73d8e02db2d_amadey_elex_remcos_smoke-loader.exe
Resource
win10v2004-20260513-en
9 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-09-06_b2e68aee8c1dd8ab4a77b73d8e02db2d_amadey_elex_remcos_smoke-loader.exe
Resource
win11ltsc2024-20260710-en
10 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-09-06_b2e68aee8c1dd8ab4a77b73d8e02db2d_amadey_elex_remcos_smoke-loader
- Size 4.0MB
- SHA256 2fe391219edd02109e9e596cbb6a92e9518c6017b4f1dbaa9c9d3d6912dfe6f3
- MD5 b2e68aee8c1dd8ab4a77b73d8e02db2d
- SHA1 ac04e77c910d1b8f4008518a6b2fde91f526341b
- SHA512 abbd6730713f78315520cf7a5eeaf675af760e67357339d682de468a1912b4eb595ad26277e34f42c7286f99bea7fe3c8b64806f3ce96d412923ace3b436b79c
- SSDEEP 49152:0ENwzIR257BIIqR6FoRvku04YL/ENwzIR257BBIqR6FoRvku04YL:0gwkQ7yIqMeOgwkQ73IqMe
- TLSH T154163A10AB508029FAF752F55AADE1BC951C7DF0879860CBA1D577FA46362F02D3328B
- MD5 SHA1 SHA512 SSDEEP TLSH
Score9/10-
Detects executables embedding registry key / value combination indicative of disabling Windows Defen
-
Executes dropped EXE
-
Loads dropped DLL
-
Drops file in System32 directory