General
- Target 2026-09-09_af1774ad109eb561969ccea922c0c8a0_amadey_elex_remcos_smoke-loader_vidar
- Size 2.1MB
- Sample260909-q24afacd34
- SHA256 112e1af32ed0d699812c8e025163b61983ab3cf3bc655c56d9f274ec566c833c
- MD5 af1774ad109eb561969ccea922c0c8a0
- SHA1 29128897fd0c38d27d46d37e2105375a4113cfa6
- SHA512 cd05ab62168f0aee32313ae430cde6453dafeab451816a2782a2d141d45bc979e1feb7a171bc9a0c1f630b6435bce8fb9b45f4b38cf8f0170afd0bb1c97f60ab
- SSDEEP 24576:rENJKEt6dq8hXj8R2vxW870KHSe5GqR6FokG81Cvz44sLy0aZJQ5Te6LCXt:rENwzIR257BFIqR6FoRvku04YLC
- TLSH T184A54B10B7508069FAF652F55AADE26C95297CF08B9850CBB0D537FE4A362F02D37247
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
9/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-09-09_af1774ad109eb561969ccea922c0c8a0_amadey_elex_remcos_smoke-loader_vidar.exe
Resource
win10v2004-20260513-en
9 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-09-09_af1774ad109eb561969ccea922c0c8a0_amadey_elex_remcos_smoke-loader_vidar.exe
Resource
win11ltsc2024-20260709-en
10 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-09-09_af1774ad109eb561969ccea922c0c8a0_amadey_elex_remcos_smoke-loader_vidar
- Size 2.1MB
- SHA256 112e1af32ed0d699812c8e025163b61983ab3cf3bc655c56d9f274ec566c833c
- MD5 af1774ad109eb561969ccea922c0c8a0
- SHA1 29128897fd0c38d27d46d37e2105375a4113cfa6
- SHA512 cd05ab62168f0aee32313ae430cde6453dafeab451816a2782a2d141d45bc979e1feb7a171bc9a0c1f630b6435bce8fb9b45f4b38cf8f0170afd0bb1c97f60ab
- SSDEEP 24576:rENJKEt6dq8hXj8R2vxW870KHSe5GqR6FokG81Cvz44sLy0aZJQ5Te6LCXt:rENwzIR257BFIqR6FoRvku04YLC
- TLSH T184A54B10B7508069FAF652F55AADE26C95297CF08B9850CBB0D537FE4A362F02D37247
- MD5 SHA1 SHA512 SSDEEP TLSH
Score9/10-
Detects executables embedding registry key / value combination indicative of disabling Windows Defen
-
Executes dropped EXE
-
Loads dropped DLL
-
Drops file in System32 directory