General
- Target 2026-09-09_503e0766f9880368cfdda5ddc3fad606_amadey_elex_remcos_smoke-loader
- Size 2.0MB
- Sample260909-yvb7dadg85
- SHA256 8e77ee09ac36e7f71fea9dc02f1237687dc45898a03b087b9ba1a67a985a10c3
- MD5 503e0766f9880368cfdda5ddc3fad606
- SHA1 a32526fe3c99961394c71d01fa8c6b6a71246486
- SHA512 abc934210857488c91dd085522033b10b162854f1626ed61a15c306a2484c3fabaef931f4d252724f9ae36df30325b8bdcc0089c4332360c99a560ec30b8e7f6
- SSDEEP 24576:tENJKEt6dq8hXj8R2vxW870KHhe5GqR6FokG81Cvz44sLy0aZJQ5Te6LI:tENwzIR257BAIqR6FoRvku04YL
- TLSH T19EA53910A7508029FAE752F55AADE1BC951C7DF08B9860CBB1DD76FA47362E02D33287
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
9/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-09-09_503e0766f9880368cfdda5ddc3fad606_amadey_elex_remcos_smoke-loader.exe
Resource
win10v2004-20260513-en
9 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-09-09_503e0766f9880368cfdda5ddc3fad606_amadey_elex_remcos_smoke-loader.exe
Resource
win11ltsc2024-20260709-en
10 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-09-09_503e0766f9880368cfdda5ddc3fad606_amadey_elex_remcos_smoke-loader
- Size 2.0MB
- SHA256 8e77ee09ac36e7f71fea9dc02f1237687dc45898a03b087b9ba1a67a985a10c3
- MD5 503e0766f9880368cfdda5ddc3fad606
- SHA1 a32526fe3c99961394c71d01fa8c6b6a71246486
- SHA512 abc934210857488c91dd085522033b10b162854f1626ed61a15c306a2484c3fabaef931f4d252724f9ae36df30325b8bdcc0089c4332360c99a560ec30b8e7f6
- SSDEEP 24576:tENJKEt6dq8hXj8R2vxW870KHhe5GqR6FokG81Cvz44sLy0aZJQ5Te6LI:tENwzIR257BAIqR6FoRvku04YL
- TLSH T19EA53910A7508029FAE752F55AADE1BC951C7DF08B9860CBB1DD76FA47362E02D33287
- MD5 SHA1 SHA512 SSDEEP TLSH
Score9/10-
Detects executables embedding registry key / value combination indicative of disabling Windows Defen
-
Executes dropped EXE
-
Loads dropped DLL
-
Drops file in System32 directory