General
- Target 2026-09-19_9c676c3853832af0f1688e114f4301c2_amadey_elex_remcos_smoke-loader
- Size 2.0MB
- Sample260919-2ls1bat13l
- SHA256 dcdea158f2dc6a7ba4e0740bf8c5fe0481cc81c733f57aa8fa45e33b3e10e6b0
- MD5 9c676c3853832af0f1688e114f4301c2
- SHA1 2b23f34e2db09040fe9bf6d76fef67966051f6c6
- SHA512 984ac476d091e0c94586b565a11e8a9e80ebe5431f9b226dedcf4f5476a92633215adc15f8a4e514d7a4606c85e38603fd5551af81b00744b1146410dfbeb014
- SSDEEP 24576:5ENJKEt6dq8hXj8R2vxW870KH+e5GqR6FokG81Cvz44sLy0aZJQ5Te6Ll:5ENwzIR257BhIqR6FoRvku04YL
- TLSH T1E5A54B22A7508018FAE722F55AADE16C951CBDF0879850CBB0E97BF945356F03D3728B
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
9/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-09-19_9c676c3853832af0f1688e114f4301c2_amadey_elex_remcos_smoke-loader.exe
Resource
win10v2004-20260911-en
9 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-09-19_9c676c3853832af0f1688e114f4301c2_amadey_elex_remcos_smoke-loader.exe
Resource
win11ltsc2024-20260911-en
10 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-09-19_9c676c3853832af0f1688e114f4301c2_amadey_elex_remcos_smoke-loader
- Size 2.0MB
- SHA256 dcdea158f2dc6a7ba4e0740bf8c5fe0481cc81c733f57aa8fa45e33b3e10e6b0
- MD5 9c676c3853832af0f1688e114f4301c2
- SHA1 2b23f34e2db09040fe9bf6d76fef67966051f6c6
- SHA512 984ac476d091e0c94586b565a11e8a9e80ebe5431f9b226dedcf4f5476a92633215adc15f8a4e514d7a4606c85e38603fd5551af81b00744b1146410dfbeb014
- SSDEEP 24576:5ENJKEt6dq8hXj8R2vxW870KH+e5GqR6FokG81Cvz44sLy0aZJQ5Te6Ll:5ENwzIR257BhIqR6FoRvku04YL
- TLSH T1E5A54B22A7508018FAE722F55AADE16C951CBDF0879850CBB0E97BF945356F03D3728B
- MD5 SHA1 SHA512 SSDEEP TLSH
Score9/10-
Detects executables embedding registry key / value combination indicative of disabling Windows Defen
-
Executes dropped EXE
-
Loads dropped DLL
-
Drops file in System32 directory