General
- Target 2026-10-21_712be5670f78c544cbc268a795de12a1_amadey_elex_remcos_smoke-loader_vidar
- Size 2.1MB
- Sample261022-1sewlabf49
- SHA256 c7162bca0c79f498a9c0253bf9cab9c990309784c9bdeca45be0b875ea25d557
- MD5 712be5670f78c544cbc268a795de12a1
- SHA1 e5bc3b0a3560c23fad38f6ca7cfe98b6aa0416d1
- SHA512 144b142695a7bdb9f55f99ec72952448e9541fcd6cacc63e25f9809b937bcf23f419752ee1c7a5031a1fa18b5eee7e3095da54df6e1e0708e93e4019790da035
- SSDEEP 24576:KENJKEt6dq8hXj8R2vxW870KHwe5GqR6FokG81Cvz44sLy0aZJQ5Te6LBY8dmC:KENwzIR257BTIqR6FoRvku04YLq1
- TLSH T148A54A10BB508028FAF752F55ABDE1AC952D7CF087A860CFA1D576FA46366E02D32347
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
9/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-10-21_712be5670f78c544cbc268a795de12a1_amadey_elex_remcos_smoke-loader_vidar.exe
Resource
win10v2004-20260911-en
11 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-10-21_712be5670f78c544cbc268a795de12a1_amadey_elex_remcos_smoke-loader_vidar.exe
Resource
win11ltsc2024-20260911-en
12 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-10-21_712be5670f78c544cbc268a795de12a1_amadey_elex_remcos_smoke-loader_vidar
- Size 2.1MB
- SHA256 c7162bca0c79f498a9c0253bf9cab9c990309784c9bdeca45be0b875ea25d557
- MD5 712be5670f78c544cbc268a795de12a1
- SHA1 e5bc3b0a3560c23fad38f6ca7cfe98b6aa0416d1
- SHA512 144b142695a7bdb9f55f99ec72952448e9541fcd6cacc63e25f9809b937bcf23f419752ee1c7a5031a1fa18b5eee7e3095da54df6e1e0708e93e4019790da035
- SSDEEP 24576:KENJKEt6dq8hXj8R2vxW870KHwe5GqR6FokG81Cvz44sLy0aZJQ5Te6LBY8dmC:KENwzIR257BTIqR6FoRvku04YLq1
- TLSH T148A54A10BB508028FAF752F55ABDE1AC952D7CF087A860CFA1D576FA46366E02D32347
- MD5 SHA1 SHA512 SSDEEP TLSH
Score9/10-
Detects executables embedding registry key / value combination indicative of disabling Windows Defen
-
Executes dropped EXE
-
Loads dropped DLL
-
Drops file in System32 directory