General
- Target 2026-09-09_85ee3b7d3d81bcc5238acf76c8a8a556_amadey_cobalt-strike_elex_remcos_smoke-loader_vidar
- Size 2.0MB
- Sample260909-t2mt8sgn81
- SHA256 f026ceb2e6662b4f3df88f5717c29d3bbce5360af7ff05fc2e0a89485d6681fb
- MD5 85ee3b7d3d81bcc5238acf76c8a8a556
- SHA1 bc47687b917fdc612bf57dc923b83d7b052a30f1
- SHA512 42593bd7faa9eb7b5e8419c7cde55a015182b63ae5c70e2fc293b0d5ea45d5042de604eeec80a5625cdfbd82116c2c5141cd6bb44e9a856b04b47288439c9793
- SSDEEP 24576:VENJKEt6dq8hXj8R2vxW870KHhe5GqR6FokG81Cvz44sLy0aZJQ5Te6LK:VENwzIR257BAIqR6FoRvku04YL
- TLSH T1E0A55B10AB508028FAF712F55ABEE1AC951C7DF0879860CFA1D577FA46366E12D3324B
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
9/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-09-09_85ee3b7d3d81bcc5238acf76c8a8a556_amadey_cobalt-strike_elex_remcos_smoke-loader_vidar.exe
Resource
win10v2004-20260513-en
9 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-09-09_85ee3b7d3d81bcc5238acf76c8a8a556_amadey_cobalt-strike_elex_remcos_smoke-loader_vidar.exe
Resource
win11ltsc2024-20260709-en
10 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-09-09_85ee3b7d3d81bcc5238acf76c8a8a556_amadey_cobalt-strike_elex_remcos_smoke-loader_vidar
- Size 2.0MB
- SHA256 f026ceb2e6662b4f3df88f5717c29d3bbce5360af7ff05fc2e0a89485d6681fb
- MD5 85ee3b7d3d81bcc5238acf76c8a8a556
- SHA1 bc47687b917fdc612bf57dc923b83d7b052a30f1
- SHA512 42593bd7faa9eb7b5e8419c7cde55a015182b63ae5c70e2fc293b0d5ea45d5042de604eeec80a5625cdfbd82116c2c5141cd6bb44e9a856b04b47288439c9793
- SSDEEP 24576:VENJKEt6dq8hXj8R2vxW870KHhe5GqR6FokG81Cvz44sLy0aZJQ5Te6LK:VENwzIR257BAIqR6FoRvku04YL
- TLSH T1E0A55B10AB508028FAF712F55ABEE1AC951C7DF0879860CFA1D577FA46366E12D3324B
- MD5 SHA1 SHA512 SSDEEP TLSH
Score9/10-
Detects executables embedding registry key / value combination indicative of disabling Windows Defen
-
Executes dropped EXE
-
Loads dropped DLL
-
Drops file in System32 directory