General
- Target 2026-10-13_15ab7c534762b397197d82e807235f7e_amadey_elex_remcos_smoke-loader
- Size 5.1MB
- Sample261015-xtf89svy3k
- SHA256 26dff2b1768883bd3b669d663d215045aed2addcbc715c87519aa6a18ac6f835
- MD5 15ab7c534762b397197d82e807235f7e
- SHA1 d084a0531b61382a89e98c7df1bd42905805aff9
- SHA512 650384f529fe4d8b14f92f60c737dd8e096313e60e38782b8c59ed536482b187f87b1362b3b17d4e0b9d09b362aae0400473c57d9b601f2b73bde142eb7383a8
- SSDEEP 49152:PENwzIR257BjIqR6FoRvku04YLQENwzIR257BPIqR6FoRvku04YL:PgwkQ7ZIqMetgwkQ7JIqMe
- TLSH T15E365E026F0C8C35F5AF7DB049A9D2A851587CA087D964CB6CCC7EE9D6712E038FE256
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
9/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-10-13_15ab7c534762b397197d82e807235f7e_amadey_elex_remcos_smoke-loader.exe
Resource
win10v2004-20260911-en
10 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-10-13_15ab7c534762b397197d82e807235f7e_amadey_elex_remcos_smoke-loader.exe
Resource
win11ltsc2024-20260911-en
11 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-10-13_15ab7c534762b397197d82e807235f7e_amadey_elex_remcos_smoke-loader
- Size 5.1MB
- SHA256 26dff2b1768883bd3b669d663d215045aed2addcbc715c87519aa6a18ac6f835
- MD5 15ab7c534762b397197d82e807235f7e
- SHA1 d084a0531b61382a89e98c7df1bd42905805aff9
- SHA512 650384f529fe4d8b14f92f60c737dd8e096313e60e38782b8c59ed536482b187f87b1362b3b17d4e0b9d09b362aae0400473c57d9b601f2b73bde142eb7383a8
- SSDEEP 49152:PENwzIR257BjIqR6FoRvku04YLQENwzIR257BPIqR6FoRvku04YL:PgwkQ7ZIqMetgwkQ7JIqMe
- TLSH T15E365E026F0C8C35F5AF7DB049A9D2A851587CA087D964CB6CCC7EE9D6712E038FE256
- MD5 SHA1 SHA512 SSDEEP TLSH
Score9/10-
Detects executables embedding registry key / value combination indicative of disabling Windows Defen
-
Executes dropped EXE
-
Loads dropped DLL
-
Drops file in System32 directory