General
- Target 2026-10-14_a872b799fab2fa76cbf746fe20bf00cb_amadey_elex_remcos_smoke-loader
- Size 2.0MB
- Sample261014-sdwlsstv8q
- SHA256 99f2eac8a1281ab6c0bf25cbdd759e4c26c8cd135df21448ef605671ad9aa884
- MD5 a872b799fab2fa76cbf746fe20bf00cb
- SHA1 93d770d9572d73dff5d3a14a1ff963025ab52a0a
- SHA512 592477d6d03ae41a74829366b0fd28e580654b34288da84191a796ae58a0e39c2ecfffa0d2b43658822779298d77a4e4c28c23b64033adef3b7da2326eae7568
- SSDEEP 24576:xENJKEt6dq8hXj8R2vxW870KHYe5GqR6FokG81Cvz44sLy0aZJQ5Te6L/v:xENwzIR257B7IqR6FoRvku04YL
- TLSH T17DA54A10AB508029FAF752F55AADE1AC951C7DF0879860CBB1D577FA46362F02D3328B
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
9/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-10-14_a872b799fab2fa76cbf746fe20bf00cb_amadey_elex_remcos_smoke-loader.exe
Resource
win10v2004-20260911-en
10 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-10-14_a872b799fab2fa76cbf746fe20bf00cb_amadey_elex_remcos_smoke-loader.exe
Resource
win11ltsc2024-20260911-en
11 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-10-14_a872b799fab2fa76cbf746fe20bf00cb_amadey_elex_remcos_smoke-loader
- Size 2.0MB
- SHA256 99f2eac8a1281ab6c0bf25cbdd759e4c26c8cd135df21448ef605671ad9aa884
- MD5 a872b799fab2fa76cbf746fe20bf00cb
- SHA1 93d770d9572d73dff5d3a14a1ff963025ab52a0a
- SHA512 592477d6d03ae41a74829366b0fd28e580654b34288da84191a796ae58a0e39c2ecfffa0d2b43658822779298d77a4e4c28c23b64033adef3b7da2326eae7568
- SSDEEP 24576:xENJKEt6dq8hXj8R2vxW870KHYe5GqR6FokG81Cvz44sLy0aZJQ5Te6L/v:xENwzIR257B7IqR6FoRvku04YL
- TLSH T17DA54A10AB508029FAF752F55AADE1AC951C7DF0879860CBB1D577FA46362F02D3328B
- MD5 SHA1 SHA512 SSDEEP TLSH
Score9/10-
Detects executables embedding registry key / value combination indicative of disabling Windows Defen
-
Executes dropped EXE
-
Loads dropped DLL
-
Drops file in System32 directory