General
- Target 2026-09-19_a3c719fc58198035eb9f06630b2213b8_amadey_elex_icedid_njrat_remcos_smoke-loader_vidar
- Size 2.3MB
- Sample260919-2adfgsty7m
- SHA256 fbc9984027951e5b2bec827e4ab691b497ea740de14fc8090d9014e6e53fac93
- MD5 a3c719fc58198035eb9f06630b2213b8
- SHA1 b2dd38a6ce9e55fb8ec00e0dbd8ab9afcf116649
- SHA512 318602eaa3e9542f532f88b960a6a518880f3721b9886219d39d01be415313f6e619c57087a16646c3bf84f0652a166607f0c50370870fbcaa8f4d563690af24
- SSDEEP 49152:RENwzIR257BxIqR6FoRvku04YLx0//jkb5L8:RgwkQ73IqMetjk98
- TLSH T153B56C10B7508028FEF752B54AAEE17895297CB047A8A0CBA1D577FA5A376F02D33347
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
9/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-09-19_a3c719fc58198035eb9f06630b2213b8_amadey_elex_icedid_njrat_remcos_smoke-loader_vidar.exe
Resource
win10v2004-20260911-en
9 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-09-19_a3c719fc58198035eb9f06630b2213b8_amadey_elex_icedid_njrat_remcos_smoke-loader_vidar.exe
Resource
win11ltsc2024-20260911-en
10 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-09-19_a3c719fc58198035eb9f06630b2213b8_amadey_elex_icedid_njrat_remcos_smoke-loader_vidar
- Size 2.3MB
- SHA256 fbc9984027951e5b2bec827e4ab691b497ea740de14fc8090d9014e6e53fac93
- MD5 a3c719fc58198035eb9f06630b2213b8
- SHA1 b2dd38a6ce9e55fb8ec00e0dbd8ab9afcf116649
- SHA512 318602eaa3e9542f532f88b960a6a518880f3721b9886219d39d01be415313f6e619c57087a16646c3bf84f0652a166607f0c50370870fbcaa8f4d563690af24
- SSDEEP 49152:RENwzIR257BxIqR6FoRvku04YLx0//jkb5L8:RgwkQ73IqMetjk98
- TLSH T153B56C10B7508028FEF752B54AAEE17895297CB047A8A0CBA1D577FA5A376F02D33347
- MD5 SHA1 SHA512 SSDEEP TLSH
Score9/10-
Detects executables embedding registry key / value combination indicative of disabling Windows Defen
-
Executes dropped EXE
-
Loads dropped DLL
-
Drops file in System32 directory