General
- Target 2026-10-21_68b3d28cea869a074c5072f63a9c83b3_amadey_elex_hijackloader_remcos_smoke-loader
- Size 2.7MB
- Sample261022-23av3avvcx
- SHA256 1944ace721665c63719cd3399ba8fd77848ee7b6c1c82cdb26190b949994bb67
- MD5 68b3d28cea869a074c5072f63a9c83b3
- SHA1 b6d1380b0112d10e516f42efce729076cbc9a9c3
- SHA512 a805b5ccab5068e1f46cf9d24f4700e2b385e31e40d66500460df42123e26bb00118dddf1d5c906df5e127434f2d5d7083ba242cdd440de0a6dfe904e332c12a
- SSDEEP 49152:AENwzIR257B9IqR6FoRvku04YL1rUrp5:AgwkQ7TIqMeewL
- TLSH T1D5D58E01BB1040B9F9E682F51ABFA1A8655C7DB0475870CFA1D877FA1E356E12E32387
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
9/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-10-21_68b3d28cea869a074c5072f63a9c83b3_amadey_elex_hijackloader_remcos_smoke-loader.exe
Resource
win10v2004-20260911-en
10 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-10-21_68b3d28cea869a074c5072f63a9c83b3_amadey_elex_hijackloader_remcos_smoke-loader.exe
Resource
win11ltsc2024-20260911-en
11 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-10-21_68b3d28cea869a074c5072f63a9c83b3_amadey_elex_hijackloader_remcos_smoke-loader
- Size 2.7MB
- SHA256 1944ace721665c63719cd3399ba8fd77848ee7b6c1c82cdb26190b949994bb67
- MD5 68b3d28cea869a074c5072f63a9c83b3
- SHA1 b6d1380b0112d10e516f42efce729076cbc9a9c3
- SHA512 a805b5ccab5068e1f46cf9d24f4700e2b385e31e40d66500460df42123e26bb00118dddf1d5c906df5e127434f2d5d7083ba242cdd440de0a6dfe904e332c12a
- SSDEEP 49152:AENwzIR257B9IqR6FoRvku04YL1rUrp5:AgwkQ7TIqMeewL
- TLSH T1D5D58E01BB1040B9F9E682F51ABFA1A8655C7DB0475870CFA1D877FA1E356E12E32387
- MD5 SHA1 SHA512 SSDEEP TLSH
Score9/10-
Detects executables embedding registry key / value combination indicative of disabling Windows Defen
-
Executes dropped EXE
-
Loads dropped DLL
-
Drops file in System32 directory