General
- Target 2026-10-14_c817c954b8e1bd3b8b7fb0308fc13264_amadey_elex_remcos_smoke-loader
- Size 2.0MB
- Sample261014-pgmxaacy2v
- SHA256 edc58b80d2dd91d3f95cf64b9149b73a931f0ad6f9ee245526beb7c3a70de264
- MD5 c817c954b8e1bd3b8b7fb0308fc13264
- SHA1 898e571a3922af67d0c28e39062007f4a221e363
- SHA512 c4b862b187149ac10e38bb1d0aa8551a2539d0ed97091d81e0e5a2b0ccc458af4098c6975ce32852546481d4a9b2b0c0b6310da5e9629c8ab327ac29687594a2
- SSDEEP 24576:KENJKEt6dq8hXj8R2vxW870KHUe5GqR6FokG81Cvz44sLy0aZJQ5Te6La3Ta:KENwzIR257B3IqR6FoRvku04YL
- TLSH T1E9A53A10AB508029FAF752F55AADE1BC951C7DF0879860CBA1D577FA46362F02D3328B
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
9/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-10-14_c817c954b8e1bd3b8b7fb0308fc13264_amadey_elex_remcos_smoke-loader.exe
Resource
win10v2004-20260911-en
10 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-10-14_c817c954b8e1bd3b8b7fb0308fc13264_amadey_elex_remcos_smoke-loader.exe
Resource
win11ltsc2024-20260911-en
11 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-10-14_c817c954b8e1bd3b8b7fb0308fc13264_amadey_elex_remcos_smoke-loader
- Size 2.0MB
- SHA256 edc58b80d2dd91d3f95cf64b9149b73a931f0ad6f9ee245526beb7c3a70de264
- MD5 c817c954b8e1bd3b8b7fb0308fc13264
- SHA1 898e571a3922af67d0c28e39062007f4a221e363
- SHA512 c4b862b187149ac10e38bb1d0aa8551a2539d0ed97091d81e0e5a2b0ccc458af4098c6975ce32852546481d4a9b2b0c0b6310da5e9629c8ab327ac29687594a2
- SSDEEP 24576:KENJKEt6dq8hXj8R2vxW870KHUe5GqR6FokG81Cvz44sLy0aZJQ5Te6La3Ta:KENwzIR257B3IqR6FoRvku04YL
- TLSH T1E9A53A10AB508029FAF752F55AADE1BC951C7DF0879860CBA1D577FA46362F02D3328B
- MD5 SHA1 SHA512 SSDEEP TLSH
Score9/10-
Detects executables embedding registry key / value combination indicative of disabling Windows Defen
-
Executes dropped EXE
-
Loads dropped DLL
-
Drops file in System32 directory