General
- Target 2026-10-02_17a76f107e9d22d1da6e27a76e04ff8c_amadey_elex_remcos_smoke-loader
- Size 2.0MB
- Sample261003-t8weysec64
- SHA256 7093323c204d40995b403279cc2ceeb3ce4983789b7f107a857ffe8cde2fb8d7
- MD5 17a76f107e9d22d1da6e27a76e04ff8c
- SHA1 bb7b8fe6c7f63d35fd55cb53c577d1611559f937
- SHA512 95bd5a65da03b28a72f46907df5160da1fdcd4d9dda48086f4e187d19f81bf12fccf22dd83347bbf21cca830f71b9d33497210e46ab67752825aeb85f73c3a55
- SSDEEP 24576:tENJKEt6dq8hXj8R2vxW870KHhe5GqR6FokG81Cvz44sLy0aZJQ5Te6L2:tENwzIR257BAIqR6FoRvku04YL
- TLSH T1AFA53910A7508029FAE752F55AADE1BC951C7DB0879860CBB0DD77FA47366E02D3328B
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
9/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-10-02_17a76f107e9d22d1da6e27a76e04ff8c_amadey_elex_remcos_smoke-loader.exe
Resource
win10v2004-20260911-en
11 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-10-02_17a76f107e9d22d1da6e27a76e04ff8c_amadey_elex_remcos_smoke-loader.exe
Resource
win11ltsc2024-20260911-en
12 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-10-02_17a76f107e9d22d1da6e27a76e04ff8c_amadey_elex_remcos_smoke-loader
- Size 2.0MB
- SHA256 7093323c204d40995b403279cc2ceeb3ce4983789b7f107a857ffe8cde2fb8d7
- MD5 17a76f107e9d22d1da6e27a76e04ff8c
- SHA1 bb7b8fe6c7f63d35fd55cb53c577d1611559f937
- SHA512 95bd5a65da03b28a72f46907df5160da1fdcd4d9dda48086f4e187d19f81bf12fccf22dd83347bbf21cca830f71b9d33497210e46ab67752825aeb85f73c3a55
- SSDEEP 24576:tENJKEt6dq8hXj8R2vxW870KHhe5GqR6FokG81Cvz44sLy0aZJQ5Te6L2:tENwzIR257BAIqR6FoRvku04YL
- TLSH T1AFA53910A7508029FAE752F55AADE1BC951C7DB0879860CBB0DD77FA47366E02D3328B
- MD5 SHA1 SHA512 SSDEEP TLSH
Score9/10-
Detects executables embedding registry key / value combination indicative of disabling Windows Defen
-
Executes dropped EXE
-
Loads dropped DLL
-
Enumerates connected drives
Attempts to read the root path of hard drives other than the default C: drive.
-
Drops file in System32 directory