General
- Target 2026-09-07_7a2de77b4808a3295cd6ea6930a71701_amadey_elex_remcos_smoke-loader
- Size 2.1MB
- Sample260908-2jg52ayenc
- SHA256 66a81f6d7687e207acedeed179fb540dcb36d338d3aad03b49028fa190f9e4f9
- MD5 7a2de77b4808a3295cd6ea6930a71701
- SHA1 97002f5920d4f7774a2180768fcb0210d3d273c5
- SHA512 c5e9b3ff3aa223bb2f7ba5589ecb57a56cf0827fb1a9a1c45524d60ecd59edc75933c85ac1afaf99fef5e49dfa2588e2ed4396c4d8845976c7ddbb5a4e4054b2
- SSDEEP 24576:UENJKEt6dq8hXj8R2vxW870KHWe5GqR6FokG81Cvz44sLy0aZJQ5Te6LZTe:UENwzIR257BZIqR6FoRvku04YLt
- TLSH T129A55B10A7508029FAF712F55ABDE17C952D7DB08B98A0CBA1C976FE45367E02D33287
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
9/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-09-07_7a2de77b4808a3295cd6ea6930a71701_amadey_elex_remcos_smoke-loader.exe
Resource
win10v2004-20260513-en
9 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-09-07_7a2de77b4808a3295cd6ea6930a71701_amadey_elex_remcos_smoke-loader.exe
Resource
win11ltsc2024-20260709-en
10 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-09-07_7a2de77b4808a3295cd6ea6930a71701_amadey_elex_remcos_smoke-loader
- Size 2.1MB
- SHA256 66a81f6d7687e207acedeed179fb540dcb36d338d3aad03b49028fa190f9e4f9
- MD5 7a2de77b4808a3295cd6ea6930a71701
- SHA1 97002f5920d4f7774a2180768fcb0210d3d273c5
- SHA512 c5e9b3ff3aa223bb2f7ba5589ecb57a56cf0827fb1a9a1c45524d60ecd59edc75933c85ac1afaf99fef5e49dfa2588e2ed4396c4d8845976c7ddbb5a4e4054b2
- SSDEEP 24576:UENJKEt6dq8hXj8R2vxW870KHWe5GqR6FokG81Cvz44sLy0aZJQ5Te6LZTe:UENwzIR257BZIqR6FoRvku04YLt
- TLSH T129A55B10A7508029FAF712F55ABDE17C952D7DB08B98A0CBA1C976FE45367E02D33287
- MD5 SHA1 SHA512 SSDEEP TLSH
Score9/10-
Detects executables embedding registry key / value combination indicative of disabling Windows Defen
-
Executes dropped EXE
-
Loads dropped DLL
-
Drops file in System32 directory