General
- Target 2026-09-09_383fe9682116ee43ccdc5b6025923d9b_amadey_elex_remcos_smoke-loader
- Size 2.1MB
- Sample260909-1lay3abj2t
- SHA256 388e2f994f134619c25c2d0828aa6ca165078eea8179a2951c40f1bb02f81edc
- MD5 383fe9682116ee43ccdc5b6025923d9b
- SHA1 45f26672ec5fca49f32a602b44571994706eddcc
- SHA512 1b98554d02e1c4e6ff62b131f3d98215a881eb7bc74d9d1f7eacc223e028bde6c2ae9aee064fca9de790149b4648c8824704137b4915c0e93572858a127ef8f4
- SSDEEP 24576:IENJKEt6dq8hXj8R2vxW870KHke5GqR6FokG81Cvz44sLy0aZJQ5Te6LTcn:IENwzIR257BnIqR6FoRvku04YL
- TLSH T1DBA54A10BB508029FAF752F55AADE1AC951C7DF0879860CBA1D577FA86362F02D33287
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
7/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-09-09_383fe9682116ee43ccdc5b6025923d9b_amadey_elex_remcos_smoke-loader.exe
Resource
win10v2004-20260513-en
9 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-09-09_383fe9682116ee43ccdc5b6025923d9b_amadey_elex_remcos_smoke-loader.exe
Resource
win11ltsc2024-20260710-en
8 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-09-09_383fe9682116ee43ccdc5b6025923d9b_amadey_elex_remcos_smoke-loader
- Size 2.1MB
- SHA256 388e2f994f134619c25c2d0828aa6ca165078eea8179a2951c40f1bb02f81edc
- MD5 383fe9682116ee43ccdc5b6025923d9b
- SHA1 45f26672ec5fca49f32a602b44571994706eddcc
- SHA512 1b98554d02e1c4e6ff62b131f3d98215a881eb7bc74d9d1f7eacc223e028bde6c2ae9aee064fca9de790149b4648c8824704137b4915c0e93572858a127ef8f4
- SSDEEP 24576:IENJKEt6dq8hXj8R2vxW870KHke5GqR6FokG81Cvz44sLy0aZJQ5Te6LTcn:IENwzIR257BnIqR6FoRvku04YL
- TLSH T1DBA54A10BB508029FAF752F55AADE1AC951C7DF0879860CBA1D577FA86362F02D33287
- MD5 SHA1 SHA512 SSDEEP TLSH
Score7/10-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Executes dropped EXE
-
Drops file in System32 directory