General
- Target 2026-10-14_991988b234b5555b3f7409a73e2b6f67_amadey_elex_remcos_smoke-loader
- Size 2.0MB
- Sample261014-tphpraxygz
- SHA256 fda4a670eceb8fa5987889ef7ff8d3684f970e7b54792ca201f877b9c317dd9b
- MD5 991988b234b5555b3f7409a73e2b6f67
- SHA1 90227829091c3a24070d975e250154169cf75126
- SHA512 22760541a5505bfdf716e65fc3c61c3c1f3e1bce896b8136765e503c55198c4cecdd5a495113c5fbe9594d63dca2654ab65d00229819cda8d9c97d351955410b
- SSDEEP 24576:5ENJKEt6dq8hXj8R2vxW870KH+e5GqR6FokG81Cvz44sLy0aZJQ5Te6LXS:5ENwzIR257BhIqR6FoRvku04YL
- TLSH T1ECA54B22A7508028FAE722F55AADE16C951CBDF0879850CBB0E97BF945356F03D3724B
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
9/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-10-14_991988b234b5555b3f7409a73e2b6f67_amadey_elex_remcos_smoke-loader.exe
Resource
win10v2004-20260911-en
10 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-10-14_991988b234b5555b3f7409a73e2b6f67_amadey_elex_remcos_smoke-loader.exe
Resource
win11ltsc2024-20260911-en
11 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-10-14_991988b234b5555b3f7409a73e2b6f67_amadey_elex_remcos_smoke-loader
- Size 2.0MB
- SHA256 fda4a670eceb8fa5987889ef7ff8d3684f970e7b54792ca201f877b9c317dd9b
- MD5 991988b234b5555b3f7409a73e2b6f67
- SHA1 90227829091c3a24070d975e250154169cf75126
- SHA512 22760541a5505bfdf716e65fc3c61c3c1f3e1bce896b8136765e503c55198c4cecdd5a495113c5fbe9594d63dca2654ab65d00229819cda8d9c97d351955410b
- SSDEEP 24576:5ENJKEt6dq8hXj8R2vxW870KH+e5GqR6FokG81Cvz44sLy0aZJQ5Te6LXS:5ENwzIR257BhIqR6FoRvku04YL
- TLSH T1ECA54B22A7508028FAE722F55AADE16C951CBDF0879850CBB0E97BF945356F03D3724B
- MD5 SHA1 SHA512 SSDEEP TLSH
Score9/10-
Detects executables embedding registry key / value combination indicative of disabling Windows Defen
-
Executes dropped EXE
-
Loads dropped DLL
-
Drops file in System32 directory