General
- Target 2026-09-07_d359b4e3a029c654f108d6205579a69f_amadey_elex_remcos_smoke-loader_vidar
- Size 2.5MB
- Sample260908-fpf92asbpe
- SHA256 f5ff17557af457256dc456bf281549a790d16d73200fcf864f262ecf39f73438
- MD5 d359b4e3a029c654f108d6205579a69f
- SHA1 d94f15b03f741366b340a8a5c2d7b01d81f8751a
- SHA512 a7f87b34c7fd6308c6314b938a207b69dfed35ed7f3ee0959fc5c3f0436b13e0741843c39b97140dfce86c67e3d1ff9593bc27fc57b42427416fdf8917283e52
- SSDEEP 24576:fENJKEt6dq8hXj8R2vxW870KHFe5GqR6FokG81Cvz44sLy0aZJQ5Te6LXmxtSP+Q:fENwzIR257BkIqR6FoRvku04YLX3MT
- TLSH T113C55B10B750C018FAA752B55AEEE1B895287DF08B9850CBB0D57BFE55362F12D3328B
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
9/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-09-07_d359b4e3a029c654f108d6205579a69f_amadey_elex_remcos_smoke-loader_vidar.exe
Resource
win10v2004-20260513-en
10 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-09-07_d359b4e3a029c654f108d6205579a69f_amadey_elex_remcos_smoke-loader_vidar.exe
Resource
win11ltsc2024-20260709-en
11 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-09-07_d359b4e3a029c654f108d6205579a69f_amadey_elex_remcos_smoke-loader_vidar
- Size 2.5MB
- SHA256 f5ff17557af457256dc456bf281549a790d16d73200fcf864f262ecf39f73438
- MD5 d359b4e3a029c654f108d6205579a69f
- SHA1 d94f15b03f741366b340a8a5c2d7b01d81f8751a
- SHA512 a7f87b34c7fd6308c6314b938a207b69dfed35ed7f3ee0959fc5c3f0436b13e0741843c39b97140dfce86c67e3d1ff9593bc27fc57b42427416fdf8917283e52
- SSDEEP 24576:fENJKEt6dq8hXj8R2vxW870KHFe5GqR6FokG81Cvz44sLy0aZJQ5Te6LXmxtSP+Q:fENwzIR257BkIqR6FoRvku04YLX3MT
- TLSH T113C55B10B750C018FAA752B55AEEE1B895287DF08B9850CBB0D57BFE55362F12D3328B
- MD5 SHA1 SHA512 SSDEEP TLSH
Score9/10-
Detects executables embedding registry key / value combination indicative of disabling Windows Defen
-
Executes dropped EXE
-
Loads dropped DLL
-
Drops file in System32 directory