General
- Target 2026-10-21_6bd40782dcc50b40fded7f0e08060f97_amadey_dragonforce_elex_remcos_smoke-loader
- Size 6.9MB
- Sample261022-2m5eqsf14z
- SHA256 010450b961e319afcf9a5bd50c4bcfe599e1b105ffae6d2ad33fdc201f8d813e
- MD5 6bd40782dcc50b40fded7f0e08060f97
- SHA1 4b9d7a37746283c1a0f42d06f4ee1044522ffa33
- SHA512 e77e07bd5000c9202958aa026d70dc86fc57b60556aaf65b591df103d86223c5036d15e88b3a7ccb6149e68f0424aa51ca630957ddea8b6625d03666215537e0
- SSDEEP 98304:HgwkQ7lIqMe1tLK3BDhtvS0Hpe4zbpaAKQkroGI:HgwktikBnvjeApaAvkt
- TLSH T1F776C002B3B000A0E6A6C37089AD9339D771BD99573097CF65D457E62B363F29E3A316
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
9/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-10-21_6bd40782dcc50b40fded7f0e08060f97_amadey_dragonforce_elex_remcos_smoke-loader.exe
Resource
win10v2004-20260911-en
10 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-10-21_6bd40782dcc50b40fded7f0e08060f97_amadey_dragonforce_elex_remcos_smoke-loader.exe
Resource
win11ltsc2024-20260911-en
11 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-10-21_6bd40782dcc50b40fded7f0e08060f97_amadey_dragonforce_elex_remcos_smoke-loader
- Size 6.9MB
- SHA256 010450b961e319afcf9a5bd50c4bcfe599e1b105ffae6d2ad33fdc201f8d813e
- MD5 6bd40782dcc50b40fded7f0e08060f97
- SHA1 4b9d7a37746283c1a0f42d06f4ee1044522ffa33
- SHA512 e77e07bd5000c9202958aa026d70dc86fc57b60556aaf65b591df103d86223c5036d15e88b3a7ccb6149e68f0424aa51ca630957ddea8b6625d03666215537e0
- SSDEEP 98304:HgwkQ7lIqMe1tLK3BDhtvS0Hpe4zbpaAKQkroGI:HgwktikBnvjeApaAvkt
- TLSH T1F776C002B3B000A0E6A6C37089AD9339D771BD99573097CF65D457E62B363F29E3A316
- MD5 SHA1 SHA512 SSDEEP TLSH
Score9/10-
Detects executables embedding registry key / value combination indicative of disabling Windows Defen
-
Executes dropped EXE
-
Loads dropped DLL
-
Drops file in System32 directory